DivaVocals:
So if you are asking me should you use v1.3.9 add-ons with v1.5 if they seem to work??? I thought I was clear on my position.. I have made not explicit statements about add-ons being MORE or LESS secure in v1.3.9 versus v1.5.. However the Zen Cart admins have.. They have made a clear distinction between "working with v1.5" and "working while maintaining PCI compliance/security with v1.5"
That's very helpful, thanks. The former matters to me at present, the latter does not.
As long as 1.3.9 installations pass PCI certification as they seem to be doing at present, it doesn't matter whether ZC is itself PCI certified. That would not negate the need for PCI testing every year in any case. No UK bank will say "OK, you've used PCI certified software so we won't need to check your system" - it isn't their way!
DivaVocals:
If the person installing the add-on is not knowledgeable enough to determine whether or not a mod is TRULY v1.5 compatible versus seeing that it "appears" to work, then my answer is NO don't install add-ons until you can get confirmation that yes they are TRULY v1.5 compatible.
That does not seem to be easy. Even going through the seventeen page thread about which have been updated for 1.5.0 you get statements like:
"I have a few more to add to the list. These mods have been updated for 150, tested for functionality, and submitted to the downloads section."
Does that mean they seem to work (that's what I'd assume "tested for functionality" means) or does it mean they are "TRULY v1.5 compatible"?
There is a slowly-growing list of addons that work with 1.5 in that thread, but it seems a pity that there is no single table of addons, with an indication that whether a specified version of each addon:
- Does not work with 1.5
- "Seems to work" with 1.5 (including your "working with 1.5")
- Is 1.5 compatible (including "working while maintaining PCI compliance/security with v1.5")
- Is backwards compatible with 1.3.9
- Don't know the status yet
and also
- has a link to where that version can be found
If that could be collated into one single, updated post it would make life so much easier!
DivaVocals:
There are some v1.3.9 add-ons that WILL NOT work with v1.5 (Dual Pricing is one) and requires upgrades to work correctly.Again, very helpful. Thank you. I don't think I have managed to find that clearly stated anywhere.
I just wish I knew enough to be able to work out what the issues with Dual Pricing and 1.5.0 are. Or even where they are being discussed.
The basic reason for this store wanting to move to 1.5.0 is that they very foolishly let some graphic design firm update the look and feel (perfectly sensible) by letting them alter the code (much less sensible). They seem to have made a complete mess of some of it, incorporating all sorts of bad practice and old versions of files, and the result is lots of PHP warnings in the error logs each day. But perhaps they need to re-upgrade to 1.3.9.