data base

[scooter]

so i went all the way to zc 1.5 , figured its the same effort but now
i'm up to date .the pci certifying was a snap ,,

zc 1.39h is really not compliant with the current certification standards
i had some red flags with my first test ...

thanks ,
scooter

[dbltoe]

so i went all the way to zc 1.5 , figured its the same effort but now
i'm up to date .the pci certifying was a snap ,,

zc 1.39h is really not compliant with the current certification standards
i had some red flags with my first test ...

thanks ,
scooter

We have several 1.3.9h sites that are PCI certified. Most of the corrections required for PCI compliance were required in mods or the PHP version.
1.5.0 was specifically designed to meet PCI out of the box.

[scooter]

these are the issues that caused me to fail with the 1.3.9h version..

Multiple Cross-site scripting (XSS)
vulnerabilities in Zen Cart 1.3.9h,
CVE-2011-4547 4.30 Fail

Cross-site scripting (XSS) vulnerability
in Zen Cart before 1.5, CVE-2011-4567 4.30 Fail

so really there is no choice but to go all the way
for the no fuss no muss update and pci compliance

scooter