HELP - security, modules,

[LeslieG]

I have been reading a lot of blog posts and FAQ blurbs but I am not getting the answers I need.

I am having trouble with my site being secure (the cart) and it seems in order for me to make changes to possibley fix it I need to have an html editor.

I read somewhere that version 1.5.0 does not allow html editors due to security issues. Is there another way? Please advise.

Also, I have been moved to production for the U.S. Postal Service's Web Tools Application Program Interfaces (APIs). I was given the production server URL and for API's the secure server URL . Which one am I supposed to use? I don't think I can do anything with the information without a USPS shipping module in my zen-cart admin panel. The thing is I don't seem to have access to the shipping module.

So my main question is how do I install the addons - USPS shipping module and the footer menu (which I believe I need to upload the USPS module)? Is the footer menu addon the same as my Zen-cart's root folder? I think if I know how to do this I can figure out the security issues and the usps module.

thank you!
Leslie
www.thememorynest.com

[DrByte]

I am having trouble with my site being secure (the cart) and it seems in order for me to make changes to possibley fix it I need to have an html editor.

Huh? Please explain how you came to that conclusion? Those are two largely separate topics.

I read somewhere that version 1.5.0 does not allow html editors due to security issues. Is there another way? Please advise.

You are mistaken. It would be helpful to know where you read that info, because it's wrong.
v1.5.0 can have any HTML editor plugin installed that you want to install. There are a couple prepackaged in the Plugins section.
The very old antiquated HTMLarea editor was removed because it was antiquated. Security wasn't a driving factor in that choice.

So, still not sure what has made you think that HTML editors have anything to do with your "site being secure".

Also, I have been moved to production for the U.S. Postal Service's Web Tools Application Program Interfaces (APIs). I was given the production server URL and for API's the secure server URL . Which one am I supposed to use?

There's an FAQ article on the topic. Simply searching the FAQs for USPS brings up this article, which explains all you need to know about using your production account: http://www.zen-cart.com/content.php?...hipping-module

The module already takes care of the correct API URL. The USPS emails you get when moving to production are developer-speak for people writing their own shopping cart software, but the plugin for Zen Cart has already taken care of the programming and URL stuff.

I don't think I can do anything with the information without a USPS shipping module in my zen-cart admin panel. The thing is I don't seem to have access to the shipping module.

Simply install the USPS plugin module. It can be found in the Plugins section of this site.

footer menu

Not sure what you're referring to, or why.

[stevesh]

The HTMLArea editor was removed from the base Zencart installation, but you can install another. This is considered the best:

http://www.zen-cart.com/downloads.php?do=file&id=1098

The USPS and UPS modules were also removed from the base installation in favor of plugins. I think this is the current USPS version:

http://www.zen-cart.com/downloads.php?do=file&id=1292


Grrr. Out-typed again.

[LeslieG]

Comodo told me that I had to change all my product images to https in order to make my site secure. I don't understand what that has to do with having a secure login and cart for my customers. I was assuming the only way to change the images to https was through an html editor.

I would also like to use the editor to make changes to the template. Remember, all this is new to me. I have learned a lot in a short amount of time. I can get things mixed up and confused...

As far as the FAQ re:usps - I already did all that but can not finish without the USPS plugin. WHich I know I have to install. Now what I needed to know was how to install the modules. When I click on install will they automatically upload to my zencart or will the modeules/addons actually upload to my computer?

Thanks for you help.

[LeslieG]

Thanks Stevesh!!!

[DrByte]

Comodo told me that I had to change all my product images to https in order to make my site secure.

That sounds completely wrong. But I suspect there's been some sort of misunderstanding between both sides of the conversation.

I don't understand what that has to do with having a secure login and cart for my customers.

Me neither.

Now what I needed to know was how to install the modules. When I click on install will they automatically upload to my zencart or will the modeules/addons actually upload to my computer?

1. Download the plugin.
2. Unzip it on your computer. Usually most unzip tools will automatically retain the embedded folder structure. If it doesn't, turn that on.
3. Then upload the files to the corresponding folders on your server. Usually there is a readme file of some sort that explains any special needs related to installation.

To upload files to your server, you need an FTP program. There are tons of those all over the web. As well as instructions on how to use them.
http://www.zen-cart.com/wiki/index.php/Useful_Tools

[LeslieG]

Great. I think we have the same understanding as far as what comodo told me. Do you have any idea why the security on the cart would not be working?

[DrByte]

Your Zen Cart is in the /cart/ folder, and isn't set up to take advantage of https yet.
How to tell Zen Cart to use your SSL on pages which need to be secured: http://www.zen-cart.com/content.php?...alled-zen-cart


But, your site IN GENERAL isn't doing SSL properly.

It looks like something in your server configuration is redirecting https://www. thememorynest.com to http://www. thememorynest.com

.. and that's likely a result of something you did in your "website builder" tools, or whatever you used to create your pages that are outside of Zen Cart.
And/or it could be in the .htaccess file that's in the root folder of your website. Your hosting company should have excellent skills for troubleshooting those specific problems.

[LeslieG]

Thank you DrByte! Finally some light into the issue. I appreciate your patience with me!!