View Full Version : Open source PHP based shopping cart recommends
Woodymon 09-29-2004, 06:01 AM I was preparing to install/test osCommerce. It looked like a winner. But I found my web hosting service has register_globals disabled.whereas the current version of osCommerce requires enabled
(apparently the next milesotone version of osCommerce is scheduled to not require register_globals enabled).
Is there an Open Source PHP based shopping cart package available which does not require register_globals enabled?
Do all shopping cart solutions based on osCommerce require register_globals enabled?
Woody
CDGJerry 09-29-2004, 10:37 AM I may be wrong here but I do not beleive so. I have not found any. Reason why is that is requires quite a bit more programing for them to be off.
I wont go into the boreing details here but if you pm me i can explain further.
Basically though with globals off strings can not be called as $string but like $HTTP_POST_VARS[string]; (older php code type here)
See for example the url at the top of your browser. you have a something=something.
With globals off you have to use the post or get vars. This means that a page either always has to be used as get or post. or you have to make that page look for one or the other.
Woodymon 09-29-2004, 10:21 PM Zen Cart FAQ states it will run if register_globals are enabled
I thought Zen Cart was based on osCommerce?
So it looks as osCommerce cannot be an option for me and will try Zen Cart.
However I'm unsure if Zen Cart will work for me as description for many of the Zen Cart Payment modules for the leading gateway services require curl. But I don't believe that my web host provider supports curl.
Woody
webspacecreations 10-01-2004, 05:29 PM Hi Woody,
There are two CURL installation methods: a.) stand-alone binary and b.) PHP module. If your host supports neither, find a different host if you want a PHP shopping cart! I don't know of a method using PHP 4.x to initiate secured communications w/o CURL, something you want w/ credit card processing... unless you're passing client to processor web site for final step. -Matt
P.S. If you don't care about the language, a Perl cart should work.
Woodymon 10-10-2004, 10:32 AM I've installed ZenCart and the demo runs fine on the vhost account. However the ZenCart install script "System Inspection" reported: PHP cURL support=off.
How do I run a simple test to see if cURL is enabled for my vhost account? I've read thru the cURL docs and they seem to indicate I would need access to the command line to do this.
I don't have access to command line and assume account is set up in a chroot jail or similar. So I don't have access to make, config, configure or other dev tools.
My webhost runs Apache 1.3.31 / PHP 4.3.4 / OpenSSL 0.9.7d / MySQL 3.23.56 / Perl5.x? /mod_perl 1.29 on debian 2.6.6-1.
phpinfo() "Configure Command" entry shows --with-curl=shared,/usr
Does this mean curl is already compiled in for PHP support. Or does something else have to be done by syadmin to "enable" curl for vhost account?
Hopefully it's not a lot of work to enable the system to support cURL in PHP. Or does the system need rebuilt from scratch?
Or can I individually install "binary" version of curl library in my own directory space and point my scripts to use my installed libraries without sysadmin intervention.
Note the sysadmin at my web hosting provider is willing to adapt the system for my needs if I can point him on the right direction and not casusing any security headaches.
I'm not well versed in Perl (or in Unix as you can tell) but wish to maintain my focus on PHP development. I'm already a jack of all trades and need to slightly master something in my lifetime.
BTW how do find out which version of mod_ssl, mod_perl and mod_php4 are installed?
Thanks for any info.
Woody
cartika-andrew 10-10-2004, 11:51 PM Zen Cart most certainly runs with Register Globals Off - Zen Cart may have originally been based off of osCommerce, but the ZenCart team have done a fabulous job re-writing ALOT of the code - cleaning it up and dramatically improving on and adding to it...
Most of the payment modules work just fine with cURL off (at least all the ones we have tested - which is most of the inherent ones as well as some 3rd party ones)
Woodymon 10-11-2004, 07:27 AM Need cURL for payment processing module.
Linkpoint API or Authorize.net AIM is the direction I'm heading, unless alternatives are recommended. ZenCart listing of available payment modules states that both require cURL.
Have you worked with either gateway successfully without cURL installed?
Woodymon 10-12-2004, 04:48 AM Cartika... yes, I misspoke. ZenCart runs with register-globals "disabled", unlike oscommerce.
Which payment modules work without Curl? Authorize.net or viaKlix?
I'mhoping to comapre a few other gateway solutions. But I'm having difficulting finding out which specific gateways are supported by KeyMerchantServices/Nova. Thus far they've only informed me that verisign, authorize.net and ViaKLIX work but orginally they told me at least ten gateways were "certified". When I asked for a list of certified (and/or comaptible) gateway providers KMS sales sent me a snailmail containing an eight page alphabetical list of their VAR database (for some strange reason this list is not available on their public website). The list does not speparate gateway solutions from all the other business services.
Anyone with KMS experience/recommends? KMS/Nova is lacking in their ability to market their ecommerce solutions. Isn't marketing suppose to be the simple part?
Woody
cartika-andrew 10-12-2004, 03:33 PM Hi Woodymon, most of the inherent Zen Cart modules work without cURL enabled (in fact, every one I have tried, but someone correct me if theres some that do not work)..
We have also installed several additional payment modules that run perfectly without cURL - including SkipJack and Paradata...
Sorry, I dont have any experience with KMS/Nova - so, I wont be much help there..
Best of luck with your search...
webspacecreations 10-12-2004, 04:09 PM Authorize.net offers two methods to complete final checkout: AIM and SIM. With the AIM method, the customer stays on your web site for the entire process. With the SIM method, the customer is passed to Authorize.net at some stage prior to completion of transaction. I believe osCommerce works with both, but I've only integrated osCommerce w/ AIM. SIM should work if you don't have cURL. Other gateways with a SIM-like method would probably work fine as well. The most secure method (and method recommended by Authorize.net) is AIM. This is also, IMHO, the most professional looking to end-user.
The default osCommerce install uses the binary version of cURL, NOT PHP module. You'll have to rewite a small section of code for the cURL PHP module. This may already be done for you in ZenCart. If in doubt, why not ask your host :eek:
Woodymon 10-12-2004, 06:30 PM I hope I'm not repeating myself here. I've been attempting to obtain info from hosting provider regarding status of curl install.
Unfortunately vhost provider is undergoing major organizational changes at this time (likely being sold to another hosting provider). Thus obtaining technical info has not been easy recently. Yes I'm evaluating moving to a different host. :(
In the meantime, whichever hosting provider we end up with, I do want to implement ZenCart and want want to go the API method.
I note the available payment modules listed at ZenCart site include:
LinkPoint API (curl req'd)
Authorize.net AIM (curl req'd)
Verisign Payflow Pro
So how do I know when (and when not) cURL is required? :confused:
Before I choose a payment gateway I will need to know if one of the above API's will work with the vhost providers PHP configuration. At the same time I need to ensure whichever merchant account provider is chosen, it will work with the payment gateway. When/if I shop around for a new vhost provider I want to confirm they will be able to support the PHP (and/or curl) configuration which is required to connect ZenCart to the payment gateway. As you can see I'm stuck in somewhat of an infinite loop.
Again it's not written in stone we have to go with KMS/Nova.
But PHP based ZenCart is written in stone.
When I read thru cURL docs I did not see any mention of a binary version of cURL versus PHP module. However running phpinfo() shows "--with-curl=shared,/usr". Should it not show "--enable-curl". What does this mean? :crazy:
Any pointers as to which section of code that needs rewritten? Still learning PHP but that is my focus.
It's probably best to ask these questions on ZenCart forum but I find the perspectives that show up on WHT refreshing. Thanks.
Woody :homer:
cartika-andrew 10-12-2004, 06:56 PM phpinfo() shows "--with-curl=shared,/usr".
cURL is enabled.....
Woodymon 10-12-2004, 07:20 PM Does this mean cURL is enabled for the server or does something need to be done to enable it /make it accessilble to a specific virtual host?
I ask this because the ZenCart install script reported "PHP cURL Support = OFF".
How can I easily test this?
cartika-andrew 10-12-2004, 07:35 PM Actually, the best, easiest test is the Zen Cart install -
So far - theres no control panel, PHP info seems to indicate cURL is compiled, but Zen Cart install is showing that cURL is off on your virtual account...
This is a question you need to run by your host...
webspacecreations 10-12-2004, 11:13 PM At this stage, I think you need to post to the Zen Cart forum. It sounds as if Zen Cart is testing for, but not finding, the cURL binary, since the phpinfo() suggests the PHP module is installed. That is to say, with a slight modification, Zen Cart should work with cURL on your current host.
Any decent PHP hosting company should be able to answer the question "do you support cURL?" Now, with regards to cURL and whether it is required for a specific gateway, please re-read my prior post. You'll need to find out whether the gateway has an equivalent to the Authorize.net SIM method (i.e. you pass the customer to gateway for final stage of checkout).
Woodymon 10-13-2004, 04:17 AM Now, with regards to cURL and whether it is required for a specific gateway, please re-read my prior post. You'll need to find out whether the gateway has an equivalent to the Authorize.net SIM method (i.e. you pass the customer to gateway for final stage of checkout).
I guess I don't understand.
I've already stated I wish to go the AIM or API method.
I thought since you've indicated you understand how cURL interacts with oscommerce you would be able to state best method to test/verify it's installation or explain how to verify the binary versus PHP module type of install.
I know. These are questions best asked on ZenCart and/or cuRL PHP support forums.
OCXBIOS 10-13-2004, 08:40 AM check out hotscripts.com there are tons of opensource scripts there
webspacecreations 10-13-2004, 11:47 AM Woodymon,
I thought since you've indicated you understand how cURL interacts with oscommerce you would be able to state best method to test/verify it's installation or explain how to verify the binary versus PHP module type of install.
You've already determined the PHP cURL module IS installed when you showed the relevant phpinfo() entry. The Zen Cart script has determined the cURL binary is NOT installed. Now you just need to ask on the Zen Cart forums what code to modify to get Zen Cart working with the PHP cURL module.
CatalystServers 10-13-2004, 01:15 PM If you require register globals on and its set to off by default by the webhost just add this to your .htaccess file
php_flag register_globals on
|