There is a charge, which includes the installation and testing of the module on your Zen Cart website. Please contact us for further details.

http://www.terranetwork.net

Rhea

• You suddenly cannot login to your Zen Cart control panel.
• The “Password Forgotten” link does not send you a new password.
• The admin login box may have moved further down the web page than it used to be.
• Are you receiving orders but payments into your Pay Pal account have stopped?
• Are your customers complaining that whenever your website emails them they are also getting information about Male Potency drugs?

In the case of the first 3 bullet points there amy be other reasons for this behaviour, but if more than one of these points apply to your website then you had better start treating it as though you may have been hacked and take appropriate precautions.

If you are receiving orders but no payments into your Pay Pal account then it may be the case that as part of a hack the Pay Pal email address which payments go to has been changed to one owned by the hacker.

As for the final bullet point – if that is happening then there’s no doubt – your site has been hacked!

It goes almost without saying that if you try to go to your Zen Cart control panel or website and your anti-virus software flags up that your site contains Malware then you have definitety been hacked.

The nature, extent and purpose of these hacks vary.

One type will plant a Trojan virus on your website, which will not necessarily harm your site, but will harm the PC of anyone visiting your site who doesn’t have a good anti-virus shield operating on their PC.

In the case of the changed Pay Pal email address then the motive is financial – they steal your money.

Hackers may also activate the Credit Card module which comes bundled with a default install of Zen Cart, and thereby be able to get your customers to enter their credit/debit card details which then get sent on to the hackers.

So, if your site has been hacked what do you do?

Well, the first thing you do is put your site “Down For Maintenance”. If you cannot access your Zen Cart control panel to do that then you can do it by accessing the database via phpMyAdmin. This will not stop the hacker getting in if they already have access, but it will stop customers from using your site and getting into trouble as a result.

You can use this article to reset your Zen Cart control panel User Name and Password using phpMyAdmin:
Zen Cart Tutorial on resetting User Name and Password

What do you do next? You follow the link below to the Zen Cart site which tells you what you must do to recover from the hack:
Recovering From Hacks

This post is quite long enough now and I don’t want to overload you with information, but I will add to it over the coming days.

Rhea

What this means for Resellers is that your customers need not be asked to repoint their domains to our name servers, because you would have your own name servers for people to point their domains to. This, combined with the removal of the redirection of cPanel users to our SSL Certified address, will allow for complete white-labelling of our Reseller service.

For Resellers who grow to the point where they need their own Managed Dedicated Server from us this will also ease the transition from one server to another.

As soon as we finalise this new service we’ll add it to our site and post news of it here.

Best Wishes – Rhea

Read below for comparison or if you have have experience with either cart, leave a comment about the good and bad bits.

Magento

Magento (community edition) is a free open source shopping cart started by Varien in 2007. Magento impresses with its extensive feature list. Most functions which need to be added on with other carts come as standard. It’s ideally suited for companies who need a professional online shop presence.

• highly flexible coupon and pricing functions
• comprehensive filter functionality (filter products by)
• multi-store as standard
• ability to create and edit orders in admin
• large number of high quality modules via Magento Connect
• no need to hack core code
• impressive template system

Magento sometimes gets a bad press for being too complex and server resource-intensive. Both are fair comments, but should not put you off considering Magento. With the right developers on board and a high-end hosting environment, Magento can provide extensive functionality at open source level.

Zen Cart

Zen Cart is an open source project started in 2003, based originally on osCommerce. Zen Cart impresses with its realiability, solid feature list and ease of use, making it ideal for shop owners who intend to handle development themselves.

• highly reliable
• includes all standard features to sell online
• easy to understand templating and PHP structure
• suitable for coders beginning with PHP
• light footprint making it very accessible for shared hosting environments
• friendly forum
• active development team

That Zen Cart has been around since 2003 however shows in its PHP coding structure. However this downside is exactly what makes it accessible to beginners in PHP and makes it an ideal first cart for new coders.

ReadyCart

ReadyCart is based on osCommerce and available under licence from TerraNetwork. It was developed in-house to address the needs of businesses for a reliable cart with commercial support. ReadyCart is now discontinued as we have decided to focus on Magento and Zen Cart development instead.

Why only these three carts?

We’re not attempting to compare all carts – that would simply be impractical. Other carts exist and have their own merits. For example there’s PrestaShop, developed in France and well worth a look. Or for a simpler shop, maybe WordPress with a plug-in would suit.

Cart Comparison tables

Essentials

Both Magento and Zen Cart run on the LAMP environment (Linux, Apache, MySQL, PHP). Zen Cart is quick to install and is kind to shared hosting environments. Magento is more demanding and requires a high-end hosting enviroment. Zen Cart is usually quick to learn by simply “going in and playing around” whereas for Magento a guide or read on the wiki will help you to get your bearings.

	Magento	Zen Cart	ReadyCart
Requirements	PHP5.2 MySQL4.1.20+, InnoDB, cURL	PHP4.0+ MySQL4.1.14+	PHP4.0+ MySQL4.1.14+
Open Source?
Unlimited products?
Fee?	none	none	£295 +VAT
SSL support	full SSL	full or shared SSL	full or shared SSL
Knowledge level for coding?	advanced	intermediate	intermediate
Ease of use?	intermediate	easy	easy

Site Management

Magento has multi-shop as standard, a feature very rarely seen with other carts and a comprehensive templating system. WYSIWYG editor is missing but easily added. Zen Cart is a reliable cart with all features necessary to sell online.

	Magento	Zen Cart	ReadyCart
Multi-store
Multi-Lingual			add-on
Support for Multiple Currencies
Tax Rate support
iPhone optimised
Template system		limited
WYSIWYG?	add-on
Page content management		limited	limited
Email template management
Administration Permission System Roles and Users		add-on	add-on
One-click installs of modules

Catalog Management

Magento impresses with the product filters whilst Zen Cart makes it easy for new shops to get started quickly.

	Magento	Zen Cart	ReadyCart
Batch Import and Export of catalog		add-on	add-on
Google Base Integration		add-on	add-on
Downloadable/Digital Products
Layered / Faceted Navigation for filtering of products		limited
Product comparisons
Product reviews

Product Management

Bundled products and stock control for attributes stand out with Magento. Zen Cart however has some good features if you want customers to call for price or only use it as brochure-type site.

	Magento	Zen Cart	ReadyCart
Multiple Images Per Product
Reports		limited
Bundled products (show several products on one page)
Up-sells in Shopping Cart
Stock Control		limited	limited
Products can be marked as free or Call for Price	add-on		add-on
Min or max quantities and units	add-on		add-on

Marketing, Sales and SEO

Probably the most important section for online shops these days. Magento has created an comprehensive discount functionality making it very easy to run campaigns. Gift Certificates however are not included in Magento, but they are with Zen Cart.

	Magento	Zen Cart	ReadyCart
Google Site Map		add-on	add-on
URL Rewrites		add-on	add-on
Meta-information for products and categories			automated
Discount Coupons		limited	limited
Catalog Promotional Pricing
Multi-tier pricing			add-on
Customer groups each with its own pricing structure		add-on	add-on
Wishlist
Newsletter
Gift Certificates

Checkout

Getting the checkout right is crucial for sales conversions. Magento recognises this by offering one-page checkout and the ability to buy without having to open an account (guest checkout). It also comes with Google checkout and PayPal as standard. Zen Cart on the the other hand offers a solid standard checkout.

	Magento	Zen Cart	ReadyCart
Delivery / Billling address
One-Page Checkout		add-on	add-on
Checkout without account/Guest Checkout		add-on	add-on
Shipping to multiple addresses in one order
Integrated with Google Checkout (Level 2)		add-on	add-on

Order Management

Creating orders in admin is often required e.g. for orders taken by phone and Magento offers this as standard. Zen Cart does make order management simpler though by allowing you to create your own order statuses.

	Magento	Zen Cart	ReadyCart
Manage orders from admin
create, edit orders from admin panel.		add-on	add-on
Create one or multiple invoices, shipments and credit memos per order to allow for split fulfillment
Order statuses	preset only

Comments welcome!

Have you used Magento or ZenCart? If yes, what are your experiences? Let us know by sending a comment below!

Once the busy Christmas and New Year trading period is over we shall move further sites from Stargate to Enterprise.

The following servers are now brand-spanking new – Stargate, Pegasus, Enterprise – and no other server is more than 18 months old.

Each new server we bring online has the best spec available at that time, but we also upgrade other servers to keep their spec as close as we can to the newer servers.  So when Stargate was swapped out for a brand new unit RAM was increased to 16 Gigabytes and Atlantis has also been upgraded to 16 Gigabytes of RAM.

Because of the lack of development by Parallels of the Ensim Pro control panels both Pegasus and Enterprise use the WHM/cPanel combination.

In the New Year, tentatively scheduled for February, other shared servers will be switched from using Ensim Pro to using WHM/cPanel.  WHM/cPanel gives customers access to greater features than offered by Ensim Pro – including the ability to set up your own Cron Jobs, total control of your Spam Filters, and the use of Fantastico DeLuxe for auto-installs of many popular pieces of software.

Edith, Rhea and the team at TerraNetwork wish all of our customers a very Merry Christmas and a Happy and prosperous New Year.

Merchandising

Help your customers to buy online by guiding them to suitable presents and stocking fillers. Use your homepage to present your recommendations. Buying presents can be a tricky decision so ensure that you make it as easy as possible. Seasonal categories such as presents for her/him/kids etc will be appreciated by your customers.

Gift Selection on www.thewhitecompany.com

Design

The bad news is that if you’re starting to consider getting a design make-over for Christmas then you’re already too late. Take out your calendar for 2010 and make a note in September to contact your designer about a Christmas 2010 design.

Christmas Designs can be achieved by homepage make-overs or you can give the entire site a wintery feel by changing the browser background and site elements (e.g. header).

Christmas Design on www.cathkidston.co.uk

Stock availability

Give clear stock information. If an item takes a few weeks to deliver, then say so. If you have 10+ items in stock and it’s ready for 48 hour delivery, then say so. Re-assure by giving clear information.

Stock Information on www.gearzap.com

Delivery

Have clear information on your site about how long delivery is likely to take. Give clear “last order dates for guaranteed delivery before Christmas”. If you offer more than one delivery method (e.g. standard and next day) give cut-off dates for all different options. As we get closer to Christmas, consider putting this information on your homepage to assure customers that their presents will arrive in time.

Delivery Information on www.asos.com

Courier Services

To take advantage of last minute shopping, consider offering a 24 or 48 hour courier service. This will maximise sales right up the last days before Christmas.

Delivery Options on www.johnlewis.com

Alternative Delivery Instructions

If your delivery service requires a signature, make this clear on your site and offer alternative delivery e.g. to an office address. Or try a delivery service which does not require a signature and give your customers the option to specify a safe place to deposit parcels (e.g. shed).

Delivery Comments on crocus.co.uk

Gift Wrapping

Time-strapped shoppers will appreciate the option to send gifts directly to the recipient with gift wrapping. And to ensure a great gift experience, ensure to send the invoice separately to the billing address.

Gift Wrapping on www.marksandspencer.com

Hosting Disk space and Bandwidth

Going offline due to exceeding account limits can cost sales. So during your busy period keep an eye on your site usage statistics and if it looks like you need higher limits, contact your hosting provider well in advance to arrange upgrades. You can usually find your usage statistics in your hosting control panel.

Website Usage Stats

Checkout & Testing

Having a fully working shop is always important but most crucially during those busy Xmas days. Consider giving your shop a weekly health check – go through the site from the viewpoint of your customer, make a note of any problems and areas of improvements. Test your checkout by putting through a test order.

DB error on www.lush.co.uk on Sunday, 22 November 2009

Do you have any tips? Share via the comments box below!

Pegasus, with 16 Gbs of RAM, 2 Dual Quad Core Intel Nehalem  chips (16 CPU’s), and two SAS hard drives (15k rpm) in RAID 1 is our fastest server yet.

We shall soon (but not yet) be offering Resellers the ability to have their own custom name servers.  And we will be offering dedicated ip addresses in blocks of 5, instead of singly as we do at present.  This will allow Resellers to purchase and install Full SSL Certificates without having to apply to us beforehand for the allocation of a dedicated ip address.

The upgrade test was carried out on a standard Magento v1.3.0 install on a Linux with PHP5.2.9. Note that Magento does not allow gradual upgrades, at least not via the Magento Connect Manager. If you use the Manager, it’s all or nothing.

Preparation

Never, ever upgrade on a live site unless you really fancy a nervous break-down. The route to sanity is:

• a staging (test) environment, preferably on a separate domain to avoid all temptation of over-writing the wrong files
• backups, backups, backups. Backups are like a life-vest – cumbersome until you really need them

Staging Environment: Upgrade

Assuming you’re safely on your test/staging copy, access Magento Connect Manager by going in your browser to the “yourmagentoshop”/downloader/ folder or log into your Magento admin and go to “System -> Magento Connect -> Magento Connect Manager”. Click “check for upgrades”. If nothing happens and/or no upgrades show, then you probably installed Magento without the PEAR downloader. In order to get upgrades via Magento Connect to work, you need to enter “magento-core/Mage_All_Latest ” in the extension key field. If at this stage all goes to pot, check my problem section below.

The Magento Knowledgebase says: It is possible that you will see no extensions in MagentoConnect Manager. This means that you have just uploaded the files without using PEAR downloader. In that case enter magento-core/Mage_All_Latest in the extension key field and click Install button. This will install all latest MagentoConnect core packages on top of existing files and will allow future upgrades through MagentoConnect. Source: www.magentocommerce.com/wiki/upgrading_magento

1. Click ‘Select all upgradable extensions’
2. Click ‘Commit changes’
3. Watch the console progress for error messages
4. After successfully upgrading click the ‘Refresh’ button that will appear under the console frame.

Check your customisations / templates

If you’ve come to this stage, it’s now a case of testing all your customisations to make sure they still work on the new version. I find scenarios a good help in this – have test routines such as purchasing, browsing etc which systematically test all key areas of your site.

Apply to live site

If you’ve tested, fixed anything that’s broken then you’re ready to apply to your live site. But only after you’ve taken that backup!

Problem #1 Magento Connect & Permissions

If you did not install Magento via the PEAR downloader, then you first have to run the command magento-core/Mage_All_Latest through Magento Connect. And this will screw up your file/folder permissions rendering your entire site as one big “500 Internal Server Error”.
Solution: Via the SSH client of your choice (e.g. Putty) run the following 2 commands:
find ./ -type f -exec chmod 644 {} \;
find ./ -type d -exec chmod 755 {} \;
Sources: http://www.magentocommerce.com/boards/viewthread/9188/P15/#t56614

UPDATE:
http://www.magentocommerce.com/wiki/groups/227/resetting_file_permissions is the Wiki page.

Problem #2 turnOffSecretKey(Array ( ) )

When I logged back into /downloader, all I got was: “Invalid method Mage_Adminhtml_Model_Url::turnOffSecretKey(Array ( ) )”.
Solution: You need to manually overwrite app/code/core/Mage/Adminhtml/Model/Url.php with the latest version
Sources: http://www.magentocommerce.com/boards/viewthread/38995/P15/#t127985

Problem #3: Still no packages in admin??

After solving problems #1 and #2 I felt on a roll. But hey, the version still said 1.3.0 in my admin. And the Connect Manager did not show a nice long list of stuff to update.
Solution: So I ran magento-core/Mage_All_Latest again and this time, I got a nice long list of stuff without any Internal Server Errors and the upgrade was applied.

Problem #4: Admin template / no drop-downs

But when I returned to admin, the drop-downs weren’t working, rendering the admin inaccessible to me.
Solution: I had to run the 2 SSH permission commands again. Although this time there was no “500 Internal Server Error”, the problem was the same – wrong file permissions.

Problem #5: Install error

During the install, I also encountered the error: “ERROR: failed to write /var/www/html/magento2/skin/adminhtml/default/default/.tmpboxes.css: Non-static method PEAR_Installer_Role::factory() should not be called statically, assuming $this from incompatible contex”.
Seems a bug in the code, so no solution for this.

Concerns

By running the upgrade via Magento Connect Manager I don’t know whether all files were successfully updated. The problem with the Url.php file was obvious, but a nagging doubt remains what other files were missed out without me knowing about it.

I’m also less than impressed that running an upgrade required solving 2 fatal errors, one of which rendered the entire site inaccessible and required SSH access to resolve (SSH access is standard on our hosting packages but some knowledge of command line will be required).

In summary, the upgrade experience confirms my belief that Magento is written for coders who don’t mind the odd command line, are happy to debug and have firm backup habits.

With cPanel customers will have the use of the Fantastico DeLuxe add-on which allows for the 1-click  auto-install of a multitude of scripts.  Customers will also be able to access the backups taken of their websites from within cPanel, via a dedicated dark fibre (dedicated fibre optic) connection to the backup servers.

Whenever we bring  a new server online we go for the best specification available at that time and Pegasus is no exception.  Pegasus will have 2 of the latest Quad Core Intel “Nehalem” CPU’s (chips), a massive 16 Gigabytes of RAM, and top-quality SAS Hard Drives operating under RAID 1.

Quick tips

• Use XAMPP 1.7.1 – the version is important! v1.6.8 may also work.
• Enable curl in php.ini
• Install from http://127.0.01 and NOT localhost

XAMPP

To run a PHP/MySQL site on a PC you need a Linux distro, giving you an Apache server on your PC. We use XAMPP – it’s reliable, well-supported and easy to install. When you install XAMPP, the version is VERY important:
XAMPP 1.7.2 uses PHP5.3 which the curent version of Magento can’t handle
XAMPP 1.7.1 is the version I’m using – recommended
XAMPP 1.7.0 does NOT work with Magento – Apache will crash during Magento install
XAMPP 1.6.8 has been reported to work with Magento but I can’t verify this

So if you’re starting from scratch, use v1.7.1. If you have an existing install, check your version and upgrade if necessary. XAMPP project: http://www.apachefriends.org/en/xampp-windows.html. Older versions can be downloaded from SourceForge: http://sourceforge.net/projects/xampp/files/. Choose the XAMPP Windows versions.

CURL

By default curl is disabled in XAMPP. Download /apachefriends/xampp/php/php.ini and find the curl extension. Uncomment it by removing the semi-colon in front of it:
extension=php_curl.dll

Installing Magento

Download the latest version of Magento: http://www.magentocommerce.com/product/community-edition
Unzip the folder into your /htdocs/ folder. By default this will unzip into a /magento/ folder.
Create a blank database via your PHPMyAdmin (http://localhost/phpmyadmin)
Go to: http://127.0.0.1/magento/index.php/install and follow the install procedure.

Note that I’m saying “127.0.0.1″. If you use “localhost” cookies won’t work (except in Opera), you won’t be able to log into admin and you will have URL warnings. Localhost isn’t recognised as valid domain name by Magento. Using “127.0.0.1″ gets round that problem as it contains dots.

You’re done & ready to develop your Magento shop offline!