Major Additions - microCART: Shopping System for vB4

microCART is a fully featured Shopping Cart for vBulletin 4.x, with support for Downloadable & Pysical Products, Subscriptions and Services, without missing any feature even from commercial scripts. Installation is very easy, you just need sometime for the initial configuration.

Edit: Please note - Currently this mod is only compatible with vBulletin 4.1.9 and below, if your using vBulletin 4.1.10 then the modifications current version released here (1.1.4) is not suggested for use. - TheLastSuperman

1.- Highlights

• Supports Downloadable products
• Since version 1.0.3 supports Physical products too!!
• Supports Subscriptions (Even Reccuring)
• Supports Services
• Ability to upgrade usergroup per product
• Unlimited depth levels of categories
• Unlimited Products
• Supports Renewals
• Ability to Add Orders manually
• PayPal & 2CO payments
• Since version 1.0.4 support payments with ccBill (Credits to kastak)
• Supports AddOns
• Support Special Deals
• Unlimited Screenshoots per product
• Unlimited Files per product, so the customers can download previous versions
• Unlimited Agreements
• Customers (and only those who have bought that product) can rate and review it.
• Admin can turn On/Off the Reviews per product
• Uses HTML Editor.
• Since version 1.0.5 support multiple Tax levels.
• Since version 1.0.5 support Shipping Zones with unlimited shipping choices per zone.
• Since version 1.0.5 supports Delivery locations (unlimited depth, eg Country, State, Area with different setup for Tax and Shipping per category.
• Since version 1.0.5 customer must enter his details to finalize the order.
• NEW!! Since version 1.0.6 supports Auto Tax calculation.
• NEW!! Since version 1.0.6 supports Auto Shipping calculation.
• NEW!! Since version 1.0.5 supports Invoice creation.
• NEW!! Comming Soon Block.

2.- Installation

• Download and unzip microCART.zip file
• Upload all the files in your site keeping the same structure. eg cart.php must be on the same level as your forum.php
• CMOD 777 the directories:
  • microcart
  • microcart/photos
  • microcart/photos/thumbs
  • microcart/photos/tmp
  • microcart/editor/files
  • microcart/editor/flash
  • microcart/editor/media
  • microcart/editor/photos
  • microcart/pdf
  • microcart/fonts
  • microcart/images
• Login to your admincp and import product-microcart.xml

3.- Configuration

• First of all you need to setup microCART General Options. The most important option is to set the path to the directory where you'll store the files. For security reasons you must create a directory over the public area. Then write the full path in the options. Don't forget the trailing slash at the end. Example:
  • /home/username/downloads/
• Setup Usergroup permissions. Available options are:
  • Can access the store
  • Can order
  • Can Moderate. Please note that, as a way to bypass the limitation of having vB editor in admincp, I've moved the product descriprion, system messages and agreements to fronend. But only those who can moderate can access this area, and only for modifying the text. Nothing more.
• Setup Categories and Subcategories for your store.
• Setup your Agreements (at least one)
• Start adding products but from AddOns and Services. It will helps you to save time, as when at a later time you add a main product, you can choose the addons.
• To work properly with HTML editor you need to edit settings.php locating at: microcart/editor/assetmanager/ and set the corrects paths.

4.- Product Options (Configurations)

In version 1.0.3 has been added support for configurable options. Not just simple text choices, but options that can increase/decrease the total price. That's why you need to pay extra attention on entering these options to avoid pricing mess.

First of all, you can find these options as "Extra Options" on the droplist on the right of each product (AdminCP). By choosing it you'll get a list of all available configurable options for the specific product. You can Edit and Delete it, or you can change the display order. Click "New Extra Option" to add one.

There is no need for explanation of title. Write there anything that you want. Examples of configuration options are: Color, Size, Ram, Hard disk etc. So let's write Size. In the box below you must add all the available options keeping the format:
Amount|Name

Examples:

• 0|Normal : This option dosen't changes the product's price and it will appears as: Normal
• 15.30|Large : This option increases the price by 15.30 and it will appears as: Large (+$15.30) ... The currency symbol is the one that you've setup. DON'T NEED TO ENTER CURRENCY SYMBOL HERE
• -7.50|Mini : This option decreases the price by 7.50 and it will appears as: Mini (-$7.50). ONCE MORE: DONT ADD CURRENCY SYMBOL.

5.- Product Terminology

• Price: Is the normal price that you're selling a product (eg 49.95)
• Discount: Is the amount that you're giving as discount. eg if you place 4.95 here the price will appear as $49.95 $45.00
• Special (Bundle) price. Currently not in use
• AddOns. Are products that someone can order in the same form (eg Installation, Brand Free etc).
• Special Bundle. Currently not in use

6.- Understanding Shipping Zones
To understand Shipping fields (Base weight, Base fare, Extra weight, Extra fare), you must know how the companies (at least the most of them) are working. They're saying: Till 3 kilos the rate is $15. More than 3 kilos you must add $3 per 500gr (1/2 kilos). In this example you must setup:

1. Base weight 3000 (in grammars) or 3 (in kilos)
2. Base fare 15.00
3. Extra weight 500 (in grammars) or 0.5 (in kilos)
4. Extra fare 3.00
5. Please note to use the same as the definied in the general option weight unit. Setting in options kgr and here grammars is the best way to mess your shop.

7.- Friedly notes

• Please let my copyright link in place. Thank you.
• When rating, please remember that you're rating the script and not me as a person. Thank you.
• Don't spam this thread with comments about my personality. Comment my work only. Thank you.

8.- Demo

• http://www.totally-scripts.com
• This is not a demo but shop in action.

9.- Warning

The included HTML Editor is commercial, so you can use it ONLY within microCART directory.


UPGRADING

To upgrade just upload the new files then follow 2.- Installationwith Allow Overwrite set to YES


CHANGE LOG

• Added Comming Soon Block
• Added view users invoice within admincp
• Added usergroup controled discounts
• Added stock level control
• Added coupon system
• Changed the invoice system to work better.
• Added forum home side block. (Download the product-microcart_forum_block.xml and Install like a new product)
• MICROCART_114_01022011.zip has no affects added to my account
• MICROCART_114_240211.zip has a fade in affect on my accounts pages.
• added some java for the my accounts page and the product view page. So you dont have to re-fresh the page all the time. Updated: 28/02/2011
• Fixed the problem with the euro within the add-on options.

BUG FIX

• Fixed error within the admin php file on line 23.
• Updated the forum side block ( Please let me know if you are still having problems with this. Updated Date 22nd Fed 2011)
• fixed problem with the prices. UPDATED Date 22nd Apr 2011 to upgrade just upload the files as its only the cart.php and microcart/functions.php files that have been updated.
• Fixed problem with the add-ons prices. Updated 25th Apr 2011 to upgrade just upload the cart.php file
• cart.php updated again to fix the problem with the add-ons when changing the qty within the cart.
• Fixed problem with edit invoices in admincp
• Fixed a problem with large price formats.
• Fixed problem with option prices (11-05-2011)
• Updated the files for the new editor not tested Updated 13/06/2011.

Arabic Language File Download Here

[BirdOPrey5]

Originally Posted by Toorak Times

I got this from my host


Hi Mick,


Are you using the microcart installation?

This has a file management tool kcfinder which has many known security
vulnerabilities.

http://www.tooraktimes.com.au/microc...der/browse.php -> allows you to
upload and browse the files in public_html/microcart/kcfinder/upload/files
directory.


Check this link
http://packetstormsecurity.com/files...ll-Upload.html


The hacker uploaded a shell script and tried to scan all other configuration
files in the server. I am disabling that microcart link.


root@experience [/usr/local/maldetect/sess]# more
session.hits.052214-1739.1040785
{HEX}gzbase64.inject.unclassed.15 :
public_html/microcart/kcfinder/upload/files/b.php5

Your host said the URL to kcfinder was:

http://www.tooraktimes.com.au/microcart/kcfinder/browse.php

But there is no /kcfinder/ directory in this mod's zip file... Not sure how or why you have a /kcfinder/ directory but it doesn't appear to be included with this mod.

[Toorak Times]

So BOP, when I was hacked by TH3 HACK3R could they have installed it in the cart then? I saw a reference to Black Hack3r in files. I have tried to uninstall this mod but it crashed my site so I have isolated it. I wish Michael would reply as this is really stressing me out

[BirdOPrey5]

Originally Posted by Toorak Times

So BOP, when I was hacked by TH3 HACK3R could they have installed it in the cart then? I saw a reference to Black Hack3r in files. I have tried to uninstall this mod but it crashed my site so I have isolated it. I wish Michael would reply as this is really stressing me out

It's certainly possible... I would suggest anyone with this mod installed check for a /kcfinder/ directory in their /microcart/ directory, just to be sure.

At this point all I know for sure is /kcfinder/ does not come as part of this mod. I can't say whether an exploit in this mod allowed it to be uploaded or an exploit it something else did.

[Toorak Times]

Originally Posted by BirdOPrey5

It's certainly possible... I would suggest anyone with this mod installed check for a /kcfinder/ directory in their /microcart/ directory, just to be sure.

At this point all I know for sure is /kcfinder/ does not come as part of this mod. I can't say whether an exploit in this mod allowed it to be uploaded or an exploit it something else did.

I got smashed 5 times BOP, my database is still psychopathic. have a look if you like...PLEASE!!!

[BirdOPrey5]

Originally Posted by Toorak Times

I got smashed 5 times BOP, my database is still psychopathic. have a look if you like...PLEASE!!!

I would suggest you look for .php files in the following directories- I've found them in these directories while cleaning up hacked sites before (check all sub-folders of these folders as well)-

/customavatars
/customgroupicons
/customprofilepics
/images
/signaturepics

If you have attachments stored in a web accessible location check that folder too.

These folders should not contain .php files.

As for being in your database the only real place they could be is in a plugin. Check and make sure you don't have any plugins listed in Plugin Manager (not product manager) at the top listed under the "vBulletin" product. If you do make sure these are plugins you created yourself and double-check the code. This is the most often exploited spot.

Second most exploited in my experience is hidden as a plugin of Forum Runner but this will be cleaned if you re-run the upgrade script which I recommend you do if you've been hacked.

Any 3rd party products should be re-installed after a hack to make sure their plugins are the original values and don't contain backdoors left by the hacker.

[Toorak Times]

Thank you so much mate, awesome

[AwesomeMetalB]

Hello,

Regarding the post about:

The fix I use is, go to: Admin CP > Settings > Options > Site Name / URL / Contact Details
In the 'Redirect Domain Whitelist' field, add:
<a href="https://www.paypal.com/" target="_blank">https://www.paypal.com</a>
<a href="https://www.sandbox.paypal.com/" target="_blank">https://www.sandbox.paypal.com</a>


I have implemented this and still receive the following error

Invalid Redirect URL (https://www.paypal.com/cgi-bin/websc...ethod%3Dpaypal)

please see screenshot

http://tinypic.com/r/25icgtk/8

Thank you

Daniel

[amandatx]

Hello,

After the install I 'am only accessing the index page. Please see the attachment. Any solutions?

Thanks in advance.

[AwesomeMetalB]

cart.php and cart_gateway.php need to be in the same directory as forum.php

for me its /public_html

see if thats the answer

[amandatx]

Originally Posted by AwesomeMetalB

cart.php and cart_gateway.php need to be in the same directory as forum.php

for me its /public_html

see if thats the answer

Thanks for the reply. I've moved the files, not seeming to have any effect.

Thanks again.