CRE Loaded
Recently some one notified me about a serious security issue in osCommerce and CRE Loaded. Due to this issue any one can see orders information, customer information and do so many things in admin area, without login. It was hard to believe but its true. I tried it on local osCommerce installation and it worked [...]
May 20th, 2010 | Posted in CRE Loaded | No Comments
Recently had issue where customer complained that discount coupon amount was not being deducted during checkout. This issue was causing many customers to loss as amount on PayPal page was shown without discount. What I found out that issue was due to a configuration which does not cater the discount coupon amount. One configuration called [...]
February 27th, 2010 | Posted in CRE Loaded | 2 Comments
Search feature in OSCommerce and CRE Loaded provide an important functionality for visitors to perform custom search. Its important to know what visitors are searching on your site. Luckily Google Ananlytics (GA) provides and easy way to track these searches. To enable this tracking your need to login to your GA account and goto Analytics [...]
February 21st, 2010 | Posted in CRE Loaded | 6 Comments
Like every other eCommerce solution CRE Loaded provides a password protected admin area to manage all aspects of the site. Any unauthorized access to admin area can cause damage to site’s important data, any leakage of customer’s payment details can cause more issues and damage to site. CRE Loaded team has done good job to [...]
January 10th, 2010 | Posted in CRE Loaded | 1 Comment
Recently found a bug in payment module “Credit Card UK with CVC”. I was using this module with CRE Loaded pro 6.4.0. This payment module sends middle digits of CC and CVV code in an email to admin. Due to the bug this CVV code value was missing. To fix the issue open file includes/modules/payment/cc_uk.php [...]
January 6th, 2010 | Posted in CRE Loaded | No Comments
Long awaited release of CRE Loaded 6.4.1 is finally out. Now Google Base feature is back in CRE Loaded. Beside bug fixes and Google Base it also includes some new features like Admin log in as customer Several PayPal payment modules Admin Password hardening to satisfy PCI PA-DSS requirements 8.5.10 and 8.5.11 etc Right now [...]
December 29th, 2009 | Posted in CRE Loaded | No Comments
For last few days worked on performance optimization of CRE Loaded site. Now all major performance measuring tools Yahoo YSlow, Google Page Speed and WebPageTest.org are rating the site as A grade site. I have been studying and applying performance guidelines for a while. Recent addition of Site Performance stats in Google Webmaster Tools have [...]
December 29th, 2009 | Posted in CRE Loaded, Web Application Performance | 4 Comments
While working on some site I came across a bug in Special product page. If we have turned manufacturer name on in product listing, the link generated on the name is missing the manufacturer id value. The invalid link created looks like this http://demos.creloaded.com/creloaded_ce/index.php?manufacturers_id= on page https://demos.creloaded.com/creloaded_ce/specials.php. I found this in cre loaded Pro 6.4.0, [...]
December 2nd, 2009 | Posted in CRE Loaded | 1 Comment
Cache have become an important tool for increasing performance of a website. In this post we will install a famous osCommerce contribution to our CRE Loaded PCI 6.4 for cache. The contribution is called osC Advanced Cache Class. The contribution will enable us to cache just about every thing like large arrays, data, html, even [...]
December 2nd, 2009 | Posted in CRE Loaded | 8 Comments
Today fixed a bug in product listing of cre loaded 6.4.0 pro. Due this bug manufacturer link on certain pages was missing manufacturer id. The bug existed on Special products, New Products and Featured products page. To fix the issue open file specials.php and find line case ‘PRODUCT_LIST_MANUFACTURER’:. In line next to it add p.manufacturers_id, [...]
December 1st, 2009 | Posted in CRE Loaded | No Comments