Creating an online store (which software) ?

[welo]

Originally Posted by matthepepe

x-cart has a ton of security problems right now. Even if they would sell to you stay away from it until they get things fixed.

I'm working with an X-Cart Pro right now I'm installing for a client who needs a complex store solution. Where exactly did you get this info? the script looks pretty solid to me and I find nothing to outright confirm this allegation (other than people might be risking running new versions which are specifically unapproved for a live environment).

[matthepepe]

read there forums http://forum.x-cart.com/ , people even running the latest stable versions are getting hacked. And the worst one someone paid 300 bucks to x-cart to have all the latest security updates and still got hacked. Read around their fraud prevention forum its ugly.

[welo]

Yeah, I read all that. Just like I read the Feb 19 security advisory saying, "I can't stress the importance of this enough, if you are on x-cart below 3.5.X please please make sure you've done the above," and all of the stuff Here.

Yet I still see nothing with the latest version of the X-Cart script a few ordinary security precautions can't handle (like renaming your admin dir f.ex. - anyone who hasn't done this already with their VB is just begging for it). I'm working with the 3.5.8 version of X-Cart right now and see no reason to be overly concerned. Most of the flags right now are coming from people who are outright speculating at this point because they don't understand how PHP works (although I do see a few whose hosts don't know how to secure their shared servers).

I do admit the guy who paid for the security upgrade has a valid beef though .

[SaN-DeeP]

Originally Posted by Logician

Weird thing.

But you don't need it if you live in India. You have the most brilliant computer programmers in the world so I'm sure you can find a better local software.

those brilliant people, charge 10 times as compared to people frm othre countries
worst thing


How is Oscommerce in terms of security.
been long time, havent heard anything abt them..

and what abt big merchants like.
http://www.rowcal.com/
http://www.computerbrain.com/
http://www.buycyberpc.com/
http://www.pcavailable.com/
http://www.axiontech.com/
http://www.allstarshop.com/
http://www.logiccircle.com/
http://us-depot.com/
http://www.gameve.com/
etc. etc.

what package do they use ?? or they have customized solutions

Sandy...