Looking to hire someone to upgrade to latest version.

I am looking to pay someone to upgrade me to the latest version of Zen Cart. Thanks.

Before I get too far I want to ask. My host says 1.3.9h is not secure I was under the impression while 1.5.1 is out 1.3.9h is still considered safe to run. Is that true?

Ty~

My host says 1.3.9h is not secure
Well depends upon what payment gateway you are using if any and whether or not PCI compliance is an issue or not

Technically, your host is incorrect and they need to define what they consider secure.

If they are talking about PCI requirements, we have several customer sites running 1.3.9h that meet PCI requirements under several different payment gateways.

1.5.0 is certified PCI compliant out of the box. 1.5.1 is not certified PCI compliant but will pass out of the box for PCI. Don't know if 1.5.1 will be submitted for certification or not.

1.3.8a is NOT secure in that it has known vulnerabilities.

However, you can have the best Zen Cart 1.5.0, PCI-Certified site and still be vulnerable if your host is not completely current with the security steps that are part of their job. If your host allows things like FrontPage sites, then the server is vulnerable. If the server is vulnerable, nothing you can do will prevent you from a server hack.

Thus the reason many of us here on the forum harp on finding a proper host. There is no such thing as a cheap host. Even they will cost more when the bill comes in for repairing problems created by allowing other vulnerable programs on their servers.

kobra:

Well depends upon what payment gateway you are using if any and whether or not PCI compliance is an issue or not

I am running paypal as the gateway. I have a 1.5.1 with eprocessing just no products as I have to buy as they order for now as it is what it is. If I am ok with 1.3.9h I think I am going to stick with that. I am going to set up a 1.3.9h and start learning how to do this myself. I am not an idiot but the upgrade seems really, what it the word I am looking fore here maybe complicated and complex compared to a lot of open source software. Although I did get a very nice offer from one member to help as I am kinda strapped financially right now which was greatly appreciated.

My host set me this:

http://www.exploit-db.com/exploits/17308/

Thanks a lot for the responses.

D4rKNeSs:

My host set me this:

http://www.exploit-db.com/exploits/17308/
Those issues are nearly impossible to trigger unless your server's OTHER protection systems are also broken, such as the provided .htaccess rules that come with Zen Cart, even in the same version they lay those charges against. And as far as their admin-side allegations, again very difficult to trigger unless someone has already tricked you into foolish behavior of clicking links to your own admin site which they've malconfigured to do damage ... and even that would require them having knowledge of your site and admin foldername to begin with.
Practicing proper security behaviors and securing your site as per the published security recommendations would avoid the matters reported in that link.

That said, upgrading to the latest version will give you protection from known reports since even those minor "vulnerabilities" are addressed in newer versions.