Questions about oscommerce

[Sturmgiest]

A friend and I are wanting a shopping cart application to manage our sales. As it turns out, 99% of them are ridiculously overpriced and useless.

 

So we came here.

 

We have several questions.

 

First off, have the cross site scripting vulnerabilities been fixed?

 

Second, Can we create recurring payments through paypal with oscommerce?

 

Third, can we have data fields(ie desired domain name, etcetera) for the customer to enter information into upon the purchase of a product or before?

 

and finally, is oscommerce easy to integrate with ssl and the appropriate certificate?

[Sturmgiest]

Any answer?

[Gil_e_n]

1. Don't know. What cross-site scripting vulnerabilities?

 

2. I'm not exactly sure what you mean by that. You can use paypal as your processor.

 

3. Sure, if you're willing to spend a little time scripting. It wouldn't be that difficult, though.

 

4. Yep. Took me almost no time.

[GraphicsGuy]

1 - Yes, in the November 13, 2005 update this was fixed. If you downloaded a fresh download since then it is already fixed. If you installed from a web hosting control panel option, there is a good chance you need to apply the patches. (the step by step patch is included in the upgrade instructions in the main installation download package).

 

2 - I have my owrchant account and don't use PayPal so I don't know on that one.

 

3 - Just install the option types contribution. That will let you set up product attributes that are text boxes, radio buttons, check boxes or the standard drop down box included in the stock setup. The text box product attribute would be what you need for the question you posed.

 

4 - SSL use in osCommerce is easy. Most of the problems you read about on the forum stem from shared SSL installations and even that can be done.