some upgrade questions

The site I currently manage is long due for an upgrade, but I am facing a major dilemma. I have poured over the upgrade instruction multiple times and, since I have yet to use any of the the tools that are required (myphpadmin, winmerge, etc), it all seems impossible for a novice like me. I am really trying my hardest not to break something or have to recreate the entire store, but it looks like if I continue without guidance: crash and burn.

I considered looking for a pro to do the job for me, but then realized that all of our customer's credit card info is stored there. That looks like a major security risk to me.

What are my options here? Am I making the upgrade seem harder than it really is? Is there a way to hide/delete the customer's info from someone preforming the upgrade?

After reading posts about the security risks that we have with ver. 1.3.8a, I am worried that we are on borrowed time with regard to hackers! Please, any advice would help.

I would prefer to hire someone.

Can anyone recommend someone who can upgrade from 1.3.8 to 1.5?

Thanks.

Alot more fun and educational to do it yourself ...

Just create a test site and load zen and create a new data base and attack ...

Do a full backup of your site's files and database (you should do this periodically anyway) and copy them into a new location and database. Change the database name, password, etc. in the copied configure.php files to match your test db. There are instructions for doing all of these things in the tutorials.

Once you have your test installation, you can try upgrading with no pressure - if you screw up, you can delete, reinstall and start again.

Is the zencart heavily modded? Modded at all? If not, upgrading will not be too bad (and for this I'd probably just do a fresh 1.5 install and upgrade the DB, but that's me and not the official way.)

If heavily modded, or simply some mods, you will have to confirm that they will work with the new 1.5 cart and each mod may have to be upgraded.

sph
prommart com

Also, why do you have all of your customers' credit card data in your Zencart database ?

I'm the same way. novice

I was beating myself to figure how long can I hold out to do the Upgrade. But I used a person to help me set up ZC and she has been good through out all my little needs, so I figure who best to do the Upgrade.....

There's probably plenty little things like my Sliders I can do myself, but now we are talking about a major upgrade and I don't really want to mess it up.
It also helps that she is US based...

Good luck with whatever you do. I think I will get my upgrade done sometime next week.

stevesh:

Also, why do you have all of your customers' credit card data in your Zencart database ?
Exactly the question I had..:shocking:

I don't have access to our godaddy server and I asked the site owner to check on backing up the database. He said that he can go into the cpanel and request a backup from godaddy, but can't download a backup file. Is there another way around that? I did download the store via ftp.

ctfoffice:

I don't have access to our godaddy server and I asked the site owner to check on backing up the database. He said that he can go into the cpanel and request a backup from godaddy, but can't download a backup file. Is there another way around that? I did download the store via ftp.

Can you not access phpMyAdmin through GoDaddy's (so-called) c-panel?

And if you are not the "website owner", what is your association with the site?

You need to get hold of GoDaddy (not easy, I know) and determine just how you get into phpMyAdmin for your site.

I would also suggest that when you have a full backup of both the files AND the database, you put the current site into maintenance mode, and then re-establish it on a completely different host. GoDaddy is perhaps the worst choice of host, and sounds like a significant part of your current problem.

Thanks to all of you who replied!!

SPH: I don't think that much has been modded on our site. How do I know for sure what the mods are?

Stevesh: When we set up the store, it was thought that processing the credit cards offline, in our office would be safe, but now we know that is a bad thing. We have setup an account with Authorize.net and will do the right thing from now on. :smile:

I'm almost afraid to ask, but doesn't GoDaddy offer MyPHPAdmin in it's control panel ? If so, your site owner can use that to Export the database to a file.

stevesh:

I'm almost afraid to ask, but doesn't GoDaddy offer MyPHPAdmin in it's control panel ? If so, your site owner can use that to Export the database to a file.
They do offer MyPHPAdmin in their control panel, and you can indeed back the database up that way.. If ctfoffice is not familiar with MyPHPAdmin or how to access it through the Go Daddy cPanel, my suggestion for ctfoffice is to contact GoDaddy and have their tech support walk him through the DB backup.

ctfoffice:

Thanks to all of you who replied!!
SPH: I don't think that much has been modded on our site. How do I know for sure what the mods are?

The first mod is probably the template, which will have to be confirmed that it currently will work with the new zencart 1.5 or perhaps has an upgraded version.

Other common mods are: Image Handler (there is a new one for 1.5); Easy Populate (a new one for 1.5 is mostly done, apparently lacking attribute function last I looked); Lightbox or Slimbox. Many, maybe most, mods will appear in admin/configuration toward bottom or admin/tools toward bottom. But can appear anywhere in admin.

Other mods may not appear in admin at all, having more to do with the template/site look.

There are your language/english files (shipping, conditions, etc.) that you will probably want to save for sure.

Images folder.

Customers, categories, products are in the DB and will come along with the DB upgrade.

I think it is the mods that make an upgrade potentially more complicated. If one simply has a straight zencart with just a template, a fresh 1.5 install with the template and DB upgrade is what I'd go for. (saving images folder and languages folder for re-use as needed.)

If you can provide a link to the site perhaps the forum can give an idea of probable mods and difficulty.

Since many here don't like godaddy, you might look in to a change unless you're satisfied from past experience.

sph
prommart com

fairestcape:

Can you not access phpMyAdmin through GoDaddy's (so-called) c-panel?

And if you are not the "website owner", what is your association with the site?

You need to get hold of GoDaddy (not easy, I know) and determine just how you get into phpMyAdmin for your site.

I would also suggest that when you have a full backup of both the files AND the database, you put the current site into maintenance mode, and then re-establish it on a completely different host. GoDaddy is perhaps the worst choice of host, and sounds like a significant part of your current problem.

I agree with NOT using Godaddy. I had bought my domains from Godaddy, had started with them as Host, Found Zencart and someone here told me get rid of Godaddy, Found Gator host and couldn't have been happier.
It was like a joke dealing with Godaddy.

fairestcape:

Can you not access phpMyAdmin through GoDaddy's (so-called) c-panel?

And if you are not the "website owner", what is your association with the site?
Well, we had a company build the site and "manage" it (not my choice). They don't give me access to the server, because that would give me access to all of their other sites. I really wish we had the time and money to move our site to our own.

fairestcape:

You need to get hold of GoDaddy (not easy, I know) and determine just how you get into phpMyAdmin for your site.

I would also suggest that when you have a full backup of both the files AND the database, you put the current site into maintenance mode, and then re-establish it on a completely different host. GoDaddy is perhaps the worst choice of host, and sounds like a significant part of your current problem.
I will try tomorrow to get in touch with GoDaddy and see what can be done. Thanks!

ctfoffice:

The site I currently manage is long due for an upgrade,

< snip >

I considered looking for a pro to do the job for me,

I'm curious as to what you mean when you say you 'manage' the site. Are you responsible for site maintenance and security, or is your managerial role simply to process the orders and user database?

If you are suppoded to be handling the site security and maintenance then surely it is in both your customers and your own best interests to perform any updates yourself?

ctfoffice:

but then realized that all of our customer's credit card info is stored there. That looks like a major security risk to me.

It less of a risk than allowing this site to continue using V1.3.8

ctfoffice:

Please, any advice would help.

If your client is expecting and paying you to the keep the site secure then you need to take the time to learn how to perform the upgrades yourself.

ctfoffice:

Am I making the upgrade seem harder than it really is?

Probably. Why not experiment on your local computer? The only way to learn is to actually do it, and if you pay a pro to do it this time you'll not be any wiser the next time. Is that what you really want?

Cheers
Rod

Well, we had a company build the site and "manage" it (not my choice). They don't give me access to the server, because that would give me access to all of their other sites. I really wish we had the time and money to move our site to our own.

Are you using a reseller on Godaddy host? If so maybe your account is on a sub domain with that reseller who isn't going to give you access to the account cpanel due to having all their other sites on the same account? I am not sure Godaddy can give you access to a resellers account. Might want to get in touch with the "company" who actually has the hosting account your site is on.

ctfoffice:

Well, we had a company build the site and "manage" it (not my choice). They don't give me access to the server, because that would give me access to all of their other sites. I really wish we had the time and money to move our site to our own.

You really must have full control over your site - especially if the "company" you used does not give proper support, guidance and advice.

If you choose a host like Camelot, you will find that they may offer to help you MOVE your site - either for free, or a nominal fee.

RodG:

I'm curious as to what you mean when you say you 'manage' the site. Are you responsible for site maintenance and security, or is your managerial role simply to process the orders and user database?

If you are suppoded to be handling the site security and maintenance then surely it is in both your customers and your own best interests to perform any updates yourself? It is complicated. They could manage the site for us, but they charge by the hour and they are not very familiar ZC, so we pay for extra time as they get up to speed. Believe me, I am seriously considering moving our site.