many questions

kmcheng:

Oh, I have a follow up question I forget to ask
now that I don't need to bring down the site to backup the DB, what else would be the reason I need to bring it down?
Not sure what you mean by "bring it down".

Down for maintenance?

Um ... so does that mean the post is requesting a definition of the word "maintenance"?

The OP would have to answer that:)

yes, I meant to say what else would be the reason of going into maintenance mode
sorry for the confusion

Um, to maintain your site? Anything you might want to do with the function or appearance that you don't want people to see or interrupt while you're in the middle of it.

two rather odd questions

1. for the the image folder, is it possible to use a sub-sub folder? like /image/attributes/xyz
   I have a good amount of pictures, so sub-sub folders would be nice to organize them

2. is it possible to have the cpanel show which admin is logged in?

found out that the sql dump file made by the backup plugin cannot be imported using the phpmyadmin
is it really the case or am I doing something wrong?

Not sure exactly what you're doing. All I can tell you is that the last time I used the backup plugin it produced a SQL file that I was able to import using phpMyAdmin without any SQL errors. All my data was intact.

phpMyAdmin has a file size limit on what it can import and is subject to the PHP execution time limit. If your DB is too large to be imported using phpMyAdmin then you will have to use SSH (which has no limit).

Vger

nah, the sql file is not that big
I don't know, I tried so last night, and the phpmyadmin took a long time to load the sql file that was made by the backup plugin (or may be I should wait longer?)
on the last try, I use the one exported from phpmyadmin, finally able to import

it is possible for someone to hack the zen cart that when people enter in their credit card info in the payment gateway, the hacker can still get a copy of it?

kmcheng:

it is possible for someone to hack the zen cart that when people enter in their credit card info in the payment gateway, the hacker can still get a copy of it?

Not if all of the payment gateway is off-site. By this I mean that no credit card information is entered on your site.

If credit card information is entered on your site then it is possible for hackers with access to your site to gain access to that information.

Vger

Vger:

Not if all of the payment gateway is off-site. By this I mean that no credit card information is entered on your site.

If credit card information is entered on your site then it is possible for hackers with access to your site to gain access to that information.

Vger

off site means like ebay, right? it refers you to paypal's site for payment, when you are done, then you are back to ebay

Yes, that's what I mean by "completely off-site".

Vger

off site payment does seem unprofessional, but the security is probably worth it
should the site got hacked, the most info lost would be personal info, not credit card info

I suppose the payment gateway does let you choose on or off site, right? we haven't decide which payment gateway to use yet

I suppose the payment gateway does let you choose on or off site, right?

Wrong. It is the choice (the type) of payment gateway which decides whether the processing is done on-site or off-site.

For instance, if you were UK based and chose "Sage Pay Form" as your payment method then the customer will be taken to the Sage Pay website and make their payment there. If you chose to use "Sage Pay Direct" or "Sage Pay Server" then the customer will remain on your website, enter their credit card details and the data will be sent to Sage Pay, from there to your Bank, back to Sage Pay and back to your website but all in the background whilst the customer remains on your website.

Vger

crap...
any info on paypal or chase storefront?

This thread is getting to too many questions:P
I would suggest a little more research on your part. It's amazing what you will learn if you work for it rather than sitting in one post waiting for us to bring it to you:yes:

I have to agree - one question per post in the correct forum after you read the FAQs and use the search. Thread being closed.