Tuesday, April 21, 2009

CF Shopkart Update 5.3.0.3 Now Available

I have posted the update archive in the downloads section of the website. I have not yet written an update script so there is no notification in the control panel yet. But I will be in the a few days. Those that are following along though in the forum, twitter, and this blog now have a heads up. You can download the update now.

The CF Shopkart main archive has also been updated.

See the forum or the included text file for fixes and changes.

You can please most of the people some of the time...

This article posted by Randy Cassingham and written by Paul Myers sums it all up nicely. It made me laugh, because I have met so many of these people in the past 7 years I have been working online. And it is so true what Paul says. I enjoyed the article so much that I just had to share it. With people like Paul around publishing helpful tips and info, you don't have to learn the hard way like I did :-)

I highly recommend going over to Paul's website and subscribing to his newsletter. It's a great read for anyone who is really serious about making money online.

Read Randy's article about Paul's newsletter (the article contains a link to Paul's website) here:
http://www.thisistrue.com/blog-tanstaafl_baby.html

And while you are there, sign up to Randy's newsletter called This is True. It is awesome! Start out with the free edition if you want, but I'm telling you right now the Premium This is True is well worth the little amount Randy charges for it (you will not regret subscribing, I promise you that)! I just got my copy of the next edition delivered to my inbox and I plan to read it over a nice hot cup of coffee in the morning-- it's become my Tuesday morning ritual now :-)

Saturday, April 18, 2009

Solved my Dreamweaver CS3 connectivity problems

For the past few months I have been suffering from the dreaded connection problems using Dreamweaver FTP. I have gone through dozens of blogs and dozens of supposed fixes, and saw dozens of recommendations to 'use an external ftp program'. I even uninstalled it and resinstalled it no avail. So I gave up for awhile and started using an external one or just rebooting the system to get Dreamweaver working again. I was convinced that I would have to wipe my OS (WinXP) and reinstall because I thought maybe I screwed up something in the registry.

Here is what was happening:

Dreamweaver would work just fine for awhile (usually half an hour, sometimes longer). Then suddenly, it would start having problems connecting (I couldn't connect to any of the servers in my list). This was happening on both my laptop and my desktop so I knew it had to be something both had in common. The only way I could get Dreamweaver working again was to reboot the system. It would hang on uploading a 62KB file, trying to list the directories, and sometimes it would delete my file from the remote server and then tell me I had to turn on Passive FTP when it was already on, which would cause a 404 error on the server.

So I had this idea that just maybe it was my anti-virus.

I run AVG Anti Virus which is currently on 8.5. If you aren't running AVG, it could still be it so just try this one and see if the problem goes away for you (I know I'm not the only one that has had this problem from the posts I have seen on this):

Open your antivirus control center (for AVG you double-click the AVG icon in your tray).

You need to find the exceptions list. In AVG you click on the tools menu and click on advanced settings. Under Resident shield click on Exceptions.

I added two paths (I'm running Win XP by the way), but the second one is probably what does it:

Path 1: Enter/select the path to Adobe Dreamweaver cs3. On mine it is C:\Program Files\Adobe\Adobe Dreamweaver CS3\

Path 2: This is to the application data folder in your documents and settings under your user account (it might be hidden so you need to change windows settings to show hidden files if you don't see it). The path to mine was: C:\Documents and Settings\Jon\Application Data\Adobe\Dreamweaver 9\

In AVG click on Apply then Ok and close out of it.

It looks like Dreamweaver is working great for me now, and what is really awesome is I got a little bit of a performance boost out the file get and put operations :-)

Friday, April 17, 2009

Shipping Per Item

I just had one of my newer clients email me today asking about charging shipping per item. Not only did I realize there is a minor bug (will be fixed in next update), but it gave me an idea. When you select this method of shipping it just tells you the method was set and nothing else. You are supposed to go to each item and specify the shipping price under the settings tab when editing the item (which I told them to do, of course). However, this made me realize that I could improve on this feature.

This client has a small catalog so it's not big deal for them, but what if someone had a large catalog? Would they really want to click on each item and update one at a time? What if shipping prices go up and they need to change all their item shipping prices? That would be one heck of a task!

Well I have an idea of how I can make it better! So in an upcoming update I'm going to add the ability to change shipping prices on multiple items at once as well as adjust shipping for multiple items at once (similar to the new price adjustments feature I built in). Look for it either in the next update or the one right after.

Tuesday, April 14, 2009

Protecting your Coldfusion Tags from FCKEditor

I ran into a problem on one of my client websites that wanted some dynamic content on their homepage. I edited the homepage in Dreamweaver and added some Coldfusion tags. Two days later, the clients opens the homepage.cfm file in their control panel and FCKEditor screwed up my Coldfusion Tags which generated an error on the homepage (argh!). Naturally I figured there was a setting in fckconfig.js that would solve my troubles. Well, there is, but I had to do a bit of digging to find out how to protect my Coldfusion tags from FCKEditors wrath. You see, the good folks that make FCKEditor available tell you how to protect your php and asp code, but are silent when it comes to Coldfusion tags. FCKEditor attempts to parse Coldfusion tags as HTML and so when you switch views it messes with yours tags in unspeakable ways. But I almost did a little dance when I found the solution to my problem!

I've posted the solution in the CF Shopkart forum:
http://www.cfshopkart.org/viewtopic.php?f=12&t=125

FCKEditor will ignore any of your Coldfusion tags if you add those lines. Sure, it's a security risk if you are using FCKEditor on a public website, but it's only used in the Control Panel for my client and they don't know anything about CF so I figure I'm safe :D

Edit: In order for dynamic coldfusion content to display in a web browser using FCKeditor, you need to turn script protection off in the cfapplication tag. It is a security risk though because it protects your site from cross site scripting. So if you've been putting cf tags in FCKEditor and then wondering why the dynamic output is not working, it's because script source is on. Set it to "None" or give it a comma delimited list of variables you want to protect. Read more here: http://livedocs.adobe.com/coldfusion/8/htmldocs/help.html?content=Tags_a-b_5.html#1097308

UPDATE:
The link above is dead and I can't paste the code to my blog so if anyone seeing this still needs the code, just email me. You can contact me on my website using the contact form: http://www.cfshopkart.com

Monday, April 6, 2009

Update 3.2.0.2 included in archive now

I put the 5.3.0.2 update into the archive, but haven't made a separate package for it yet. I was planning to get to it today but didn't quite manage to get the time. I will put it up sometime this week. I am going to also release another update shortly after that. The next update will hopefully have the LinkPoint payment processor support back! It will probably be posted early to middle of next week.

Also I wanted to address something that a couple people emailed me about. There are still a couple websites reporting a vulnerability in CF Shopkart. The vulnerability was addressed over a month ago and the 5.2.2 download had the patch in it. However, I guess I didn't make that clear on the website so the report is still circulating (many of these sites copy and paste from each other and don't actually do their own research so it might a little while before the all catch up to each other). Regardless, I thought it would be best to just take the 5.2.2 download down so people will no longer believe the reports. I will no longer be offering it and the link is now broken (which will hopefully speed up the process of them taking the information down). I have also contacted a couple of them to make them aware of the update.

And just to be clear, the vulnerability has been addressed in 5.3 and no longer exists. There are still a couple more steps I plan to take to increase security in version 5.3, and I will be putting out updates as I get those steps accomplished.

Also, I will attend to any other threats that come up ASAP. So if you see something out there or hear anything, please do not hesitate to contact me about it. I want to know about it!

Friday, April 3, 2009

CF Shopkart 5.3 is out along with an update!

I have posted CF Shopkart 5.3 on the website for download. I don't have the demo ready yet, but it's coming!

I have also put out an update already (5.3.0.1). Those already running 5.3 will be notified the update is available when they login to their control panel.

Linkpoint and YourPay are not working properly, but I will be working on getting that going in the next few days. I will provide another update once I have that working.