Kryptronic Software Support Forum

You are viewing this forum as a guest. Login to an existing account, or create a new account, to reply to topics and to create new topics.

#1 08-21-2008 17:34:15

webmaster
Administrator
From: York, PA
Registered: 04-20-2001
Posts: 19798
Website

XMODs for ClickCartPro Now Available

After spending a great amount of time programming not only the ClickCartPro 6.0.8 update, but reconfiguring the Kryptronic Central Server and our main corporate site to support XMODs, we are pleased to announce Extension Modules (XMODs) for ClickCartPro are now available.  Docs on each can be found in the public docs repository:

https://central.kryptronic.com/public/docs/

If you have an existing ClickCartPro installation and want to add XMODs to it, you can purchase them here:

https://kryptronic.com/ccp0-prodshow/CCPXMODS.html

If you don't have ClickCartPro yet, you can purchase it here (with XMODs):

https://kryptronic.com/ccp0-prodshow/CCPFULL.html

Here is a list of the XMODs available:

: The AutoGC XMOD for ClickCartPro is a module that provides the ability to sell automatically created gift certificates in ClickCartPro the online store.

: The SiteMap XMOD for ClickCartPro is an advanced module, which creates a sitemaps.org compliant sitemap.xml file and automatically submits it to search engines. The module also creates a custom page, which includes an HTML formatted sitemap.

: The ShipEstimator XMOD for ClickCartPro is a module that provides shipping rate quotes on the shopping cart page of the ClickCartPro online store.

: The QuickBuy XMOD for ClickCartPro is a module that provides a number of elements that can be used to increase online store conversion and/or efficiency.  It has a one-page store with quick checkout and a POS interface.

: The THUB XMOD for ClickCartPro is a module that provides interactivity between ClickCartPro and T-HUB software by Atandra (available at http://www.atandra.com/).


Nick Hendler

Offline

 

#2 08-21-2008 21:35:08

posnpretty
Member
From: Kentucky
Registered: 05-04-2008
Posts: 130
Website

Re: XMODs for ClickCartPro Now Available

Hurray for the XMods! I'll take 'em all except for T-HUB (I use Peachtree, not QuickBooks).

Just one question - I am still evaluating the trial version. Since CCP is already installed (just not paid for) - I'm not sure how to place the order when I'm ready to buy the cart and the XMODS. I'm guessing it would be the FULL version? Even though I already have the cart installled, it's not paid for yet. smile

Thanks,
Cyndi

Offline

 

#3 08-22-2008 16:33:00

webmaster
Administrator
From: York, PA
Registered: 04-20-2001
Posts: 19798
Website

Re: XMODs for ClickCartPro Now Available

Depends.  If you want to keep your same install, order the trial conversion and add XMODs to your install here:

https://kryptronic.com/ccp0-prodshow/CCPXMODS.html

If you want to wipe out that trial install and build everything up again from scratch, order a full license and select XMODs for it as options here:

https://kryptronic.com/ccp0-prodshow/CCPFULL.html


Nick Hendler

Offline

 

#4 12-08-2008 21:57:10

ambassador
Member
Registered: 10-27-2003
Posts: 59

Re: XMODs for ClickCartPro Now Available

-------
Dec 8, 2008

Is there an XMOD that will permit the shopping cart to be used for back-end functions only, and not for generating the home and product pages? 

It is being observed; in this business, an increasing demand for a back-end-only package that will permit XHTML-savvy merchants to use their own static pages (typically 10-50 total web pages) with something bettter than the raw Paypal "shopping cart."


Ambassador
-------

Offline

 

#5 12-09-2008 05:45:07

Dave
Member
Registered: 07-05-2003
Posts: 11233

Re: XMODs for ClickCartPro Now Available

There isn't an XMOD for something like that but CCP supports adding things to its cart from "remote" (read external) web pages so you could accomplish that with CCP today.  You'd still need to use the checkout portion of CCP so you'd be using a portion of the front end for that function.

Offline

 

#6 12-09-2008 10:56:06

ambassador
Member
Registered: 10-27-2003
Posts: 59

Re: XMODs for ClickCartPro Now Available

-------
Dec 9, 2008

Thank you for your response.  Please provide a link that details the exact procedure for using the software in this fashion.

Ambassador
-------

Offline

 

#7 12-09-2008 11:05:39

Dave
Member
Registered: 07-05-2003
Posts: 11233

Re: XMODs for ClickCartPro Now Available

The example web page named productform.html which shows what is required to remotely add products to the CCP cart may be found in the /media/ccp0/examples directory of your CCP installation.

Offline

 

#8 12-09-2008 13:33:00

ambassador
Member
Registered: 10-27-2003
Posts: 59

Re: XMODs for ClickCartPro Now Available

-------
Dec 9, 2008

The "Sample Remote Product Form" suggests that using the software in this fashion will permit malicious use of exposed product details.  For example:

<input type="hidden" name="price" id="price" value="9.99" />

can be viewed by using a browser's "View Source" feature.  Thus, all similarly exposed fields can be captured and modified (e.g., reducing 9.99 to 0.99) during a website purchase. 

By contrast, the Paypal "shopping cart" offers an encryption of the associated fields which discourages malicious tampering of product detail fields.

The Kryptronic shopping cart may, when not used in the remote fashion, also encrypt the product detail fields.  Is this the case - I have not investigated this aspect of the cart software?


Ambassador
-------

Offline

 

#9 12-09-2008 13:42:21

Dave
Member
Registered: 07-05-2003
Posts: 11233

Re: XMODs for ClickCartPro Now Available

ambassador wrote:

The "Sample Remote Product Form" suggests that using the software in this fashion will permit malicious use of exposed product details.

can be viewed by using a browser's "View Source" feature.  Thus, all similarly exposed fields can be captured and modified (e.g., reducing 9.99 to 0.99) during a website purchase. 

The Kryptronic shopping cart may, when not used in the remote fashion, also encrypt the product detail fields.  Is this the case - I have not investigated this aspect of the cart software?

The URL that remote products may be added from is specified in the admin area of CCP.  To modify a form for submission would require having it submitted from a URL that wouldn't be specified in CCP.  No encryption of forms is done anywhere in CCP.

Offline

 

#10 12-09-2008 14:15:09

rachaelseven
Member
From: Massachusetts, USA
Registered: 01-23-2006
Posts: 3169
Website

Re: XMODs for ClickCartPro Now Available

Not to be contrary, but those with access to the Firefox web developer's toolbar, or similar utilities, can easily change form field values, hidden or not.  However, in my experience as a shop owner, with many thousands of sales under my belt, it is an almost unheard of occurrence.  Besides, you can always reject an order if it's been tampered with.

EDIT:  I should add that this is true of virtually every web site on the net that uses any kind of form submission, and is by no means any indication of weakness or vulnerability in CCP.  The same is true of all pages that rely on form submission (pretty much every shopping cart), whether or not the page and transmission are encrypted.

Last edited by rachaelseven (12-09-2008 14:31:17)


Rachael Katz
- Custom Focusing Screens for DSLR Cameras

Offline

 

#11 12-09-2008 15:16:27

Dave
Member
Registered: 07-05-2003
Posts: 11233

Re: XMODs for ClickCartPro Now Available

It's also worth noting that pricing information within the context of CCP is not carried in form variables so there isn't a chance of them being tampered with.  In addition there is extensive checking done when something is added to the cart and while going through the checkout process to make sure that nothing has been changed or tampered with.  The only "external" information that is carried in a majority of the forms is the session ID.

Offline

 

#12 12-09-2008 16:32:19

rachaelseven
Member
From: Massachusetts, USA
Registered: 01-23-2006
Posts: 3169
Website

Re: XMODs for ClickCartPro Now Available

That is an excellent improvement in CCP6 compared to CCP5 - kudos!


Rachael Katz
- Custom Focusing Screens for DSLR Cameras

Offline

 

#13 12-11-2008 22:16:21

ambassador
Member
Registered: 10-27-2003
Posts: 59

Re: XMODs for ClickCartPro Now Available

-------
Dec 11, 2008

Does a real - "live" - store exist that uses the software in this fashion?


Ambasssador
-------

Offline

 

#14 12-11-2008 22:49:55

dh783
Member
From: Avondale, Arizona
Registered: 04-06-2005
Posts: 6233
Website

Re: XMODs for ClickCartPro Now Available

It should be noted that in Daves comment about checking of items in the cart, that only those items which are in the products database will be checked, remote products do not get checked for price when entered into the cart because there is no data that can be compaired.



Does a real - "live" - store exist that uses the software in this fashion?

Not sure what you mean?

John

Last edited by dh783 (12-11-2008 22:50:26)

Offline

 

#15 12-12-2008 11:15:59

ambassador
Member
Registered: 10-27-2003
Posts: 59

Re: XMODs for ClickCartPro Now Available

-------
Dec 12, 2008

Regarding: "... pricing information within the context of CCP is not carried in form variables ..." - the CCP "Sample Remote Product Form" (referenced by another on Dec 9) suggests pricing is indeed exploitable via the form variables.  As reported earlier, the referenced CCP "Sample Remote Product Form" offers the following example.

<input type="hidden" name="price" id="price" value="9.99" />


Regarding the meaning of: "Does a real - 'live' - store exist that uses the software in this fashion?" - a link to an operational CCP store using the prescribed "remote" method (as described on Dec 12 by another) would address the question.

Ambassador
-------

Offline

 

#16 12-12-2008 11:19:48

Dave
Member
Registered: 07-05-2003
Posts: 11233

Re: XMODs for ClickCartPro Now Available

The Kryptronic site uses it for .

Using the remote add to cart method is not considered "within the context of CCP".

Offline

 

#17 12-12-2008 13:12:48

dh783
Member
From: Avondale, Arizona
Registered: 04-06-2005
Posts: 6233
Website

Re: XMODs for ClickCartPro Now Available

Well I don't use remote products in general but I do use the concept of a remote product in the use of items like gift certificates that the customer can input the amount they want which I then enter (force) them into the cart as a remote product so that they don't get checked by the cart/checkout scripts and thus retain the customer entered value.

John

Offline

 

#18 12-13-2008 16:09:34

ambassador
Member
Registered: 10-27-2003
Posts: 59

Re: XMODs for ClickCartPro Now Available

-------
Dec 13, 2008

Is there an XMOD that enables CCP - within the context of CCP - to generate and use static (i.e., not dynamic, not database driven) web pages like some of the other shopping carts?

Ambassador
-------

Offline

 

#19 12-13-2008 16:42:07

dh783
Member
From: Avondale, Arizona
Registered: 04-06-2005
Posts: 6233
Website

Re: XMODs for ClickCartPro Now Available

All menu link under the Main Menu header are considered static html pages, it doesn't take an XMOD to get ccp to use standard xhtml pages, it just depends on where you want them displayed which can get a little tricky, menu wise, to get them displayed.

John

Offline

 

#20 12-20-2008 19:28:40

ambassador
Member
Registered: 10-27-2003
Posts: 59

Re: XMODs for ClickCartPro Now Available

-------
Dec 20, 2008

Given "... it doesn't take an XMOD to get ccp to use standard xhtml pages ..." (although CCP really does not do this well) - then can CCP be used, within the context of CCP, to exhibit and sell all of a store's products (approximately seven products) on the index.php page? 

In other words, there would be no "category pages" and no separate "product detail pages" on the entire site.  The site would exhibit:

1.  One home page whereon all of the seven products are fully specified and offered, and
2.  The cart/checkout pages.

Ambassador
-------

Offline

 

#21 12-20-2008 20:04:02

dh783
Member
From: Avondale, Arizona
Registered: 04-06-2005
Posts: 6233
Website

Re: XMODs for ClickCartPro Now Available

You don't have to create any categories and you can place the items into the datebase, or not, and still call or place them into the cart using a remote style webpage. In what you want to do I would code the items into the splash page code at

Home > ClickCartPro > Web Pages: Web Page Management > Manage Web Pages > splash using the information for remote webpagess found in the example webpage in your public_dir/khxc/media/ccp0/examples/productform.html .

You can have only those menu items that you want / need to be displayed by selecting which menus are displayed at

Home > ClickCartPro > Displays: Skins, Menus, XHTML Includes and Messages > Manage FrontEnd Menus .

John

John

Offline

 

#22 12-20-2008 20:32:23

ambassador
Member
Registered: 10-27-2003
Posts: 59

Re: XMODs for ClickCartPro Now Available

-------
Dec 20, 2008

Thank you. 

The "remote" option will work.  However, it has already been mentioned that CCP's "remote style" webpages are not well managed by the CCP software when it comes to security.  Recall that CCP's example "remote" page instructs the use of:

<input type="hidden" name="price" id="price" value="9.99" />

as the method of transferring a product's price.  This approach is, by every reputable shopping cart security professional's confirmation, an unnecessarily present exploit opportunity.

Alternatively, if the CCP cart were a bit more robust from an SEO perspective (e.g., coded so that there is only one URL - not mutiple URLs - to any single page, etc.), then the dynamic, naturally produced "non-remote" pages would be more desirable.

Ambassador
-------

Offline

 

#23 12-20-2008 20:41:11

Dave
Member
Registered: 07-05-2003
Posts: 11233

Re: XMODs for ClickCartPro Now Available

ambassador wrote:

Alternatively, if the CCP cart were a bit more robust from an SEO perspective (e.g., coded so that there is only one URL - not mutiple URLs - to any single page, etc.), then the dynamic, naturally produced "non-remote" pages would be more desirable.

What leads you to believe that there would be multiple URLs for a product page?  You'd be hard pressed to find any cart solution with the SEO options available in CCP.

Offline

 

#24 12-20-2008 20:56:28

ambassador
Member
Registered: 10-27-2003
Posts: 59

Re: XMODs for ClickCartPro Now Available

-------
Dec 20, 2008

The CCP software is not being demeaned in the post.  In fact, the CCP software has been purchased for use here.  The software does; however, exhibit some significant weaknesses.  It is a solution to some of these very weaknesses that is presently being pursued.

Regarding the URLs, the software's developers should understand the matter.

Ambassador
-------

Offline

 

#25 12-20-2008 21:18:15

Dave
Member
Registered: 07-05-2003
Posts: 11233

Re: XMODs for ClickCartPro Now Available

Please explain "significant weaknesses". 

I am one of the developers and I don't understand your statement/assertion about URLs.  You, the store owner, have complete and total control of the URLs that are generated.

Offline

 

Board footer