phpshop and hostmatters servers

[Cloughie]

I am going to be using php shop in the near future.

I see many people are using phpshop with securehosting.com

Is there any need for this as I am a reseller and I am reselling the 1000 account to my customer with ssl support?

How do you set up ssl correctly to work with phpshop so a customer can log onto phpshop and view cc details securely?

Thanks and speak soon

Daniel

[Stoker]

The customer need to purchase a Secure cert, or you can use the serverwide cert ( server.hmdns.net/~username/ ).
Installation of a cert usually goes ok via WHM. Settings in
PHPshop is done in the phpshoproot/etc/phpshop.cfg file, one url for normal and one for secure.
The only requirement on a HM server for running PHPshop is that the account has a MySQL database, you need to set that up from the control panel and then adjust the settings in the phpshop config. The help files and phpshop.org is useful when setting this up.

[Annette]

We have a number of people running phpshop on the servers without issue. We've also assisted with ironing out issues unrealted to SSL options within phpshop that are usually due to permissions and pathing, so if you require assistance, give us a shout (or at least a ticket).

[Stoker]

..matter of fact I have recently been tweaking a phpshop implemention quite a bit the last few weeks (0.6.1/0.6.2), and found several small buggy things here and there, but the 'Worst' one I think is in how the credit card numbers are stored in the db if you are using that option. They are encrypted and store ok, but the way the developer chose to do decryption is rather stupid, a quickfix is to add some addslashes() to the data field used in the query with DECODE, a better fix that will work a lot better is to not read the crypted data before decoding it but let mysql decrypt it before you get the data.. However, this single-key encryption storage of cc-numbers is not really recommended, but if anyone is interrested I can post some fix-details for this particular and serious bug..

[webman]

Hi stoker,

I'd be interested in the fixes.

Thanks in advance.

[Stoker]

In the attached file I've explaned 3 fixes, the two first ones which basically is the same ones in two different files is most important..