Ecommerce Blog

I launched new ecommerce blog to regulary post there knowledgable articles about e-commerce, for those who are going to start their business online, not only newbies, even advanced techs may find there interesting information, and post there their expiriences all about ecommerce.

cPanel’s new Vulnerability

Several bugs and vulnavulnerabilities were found on last cPanel update. Hostgator’s customers were complaning stating that their sites� were not� loaded or some of their pages loaded trojans if they� browsed pages by IE. The issue was solved within� 48 days. As they refered the problems were related with the last cPanel update and� caused by some php mis configurations.

I found many other broken sites within last days, seems there� were “big blust”.
God bless, it pass trhu us.

cPanel is found on about� 2.5 million hosts worldwide. The� application is widely used by many large hostings,� mostly those offering dedicated servers. Its userfriendly interface automates many elements of web site management for resellers and customers.

cPanel� email� their cusomers patch instuction stating as below:

Due to a recently discovered bug, it will be necessary for users who are running the CURRENT, RELEASE and STABLE branches to run a cPanel software update.

Description: An uncompilied mysqladmin script allowed an exploited copy of MySQL.pm to be places within the directory location of mysqladmin. This copy of MySQL.pm would be given preference by mysqladmin due to the precedence order of perl module searches. A malicious user could then use an exploited copy of MySQL.pm to elevate their system access (including root access). A patch for this issue has been released. Please note that this is a local issue and a system cannot be compromised remotely. The malicious user must have access to an account on the system to take advantage of this script. All cPanel and WHM server will automatically receive a patch for this update. This patch has been applied to most servers and will be applied to the remaining number of servers during the scheduled update on Sunday night, September 25th, 2006. It can be applied manually as per the instructions below. Affected

Systems: All builds on all platforms are vulnerable up to and including (11.0.0 build 492), all builds after that have been fixed. All previous builds after 9.0.0 will be automatically patched by the updater if automatic updates are set.

Fix Details: We recommend updating (if you do not wish to update see the manual patch instructions below) to the latest EDGE or CURRENT build as these builds include the latest security patch as well as additional protection (the underlying wrapper now contains vastly improved input sanitization). To do this, you will need to modify your upgrade settings thorugh the Update Config function in the Server Configuration menu of WebHost Manager. Login to WebHost Manager Naviagte to the the Update Config function in the Server Configuration menu. Change your cPanel/WHM Updates option to CURRENT or bleeding EDGE (Automatic updates recommended). Click on Save Use the Upgrade to Latest Version option within the cPanel menu. You can also apply the patch without updating: You can either run /scripts/upcp from the command line as root, or you can also upgrade from inside WebHostManager by using the Upgrade to Latest Version option within the cPanel menu.

Paypal account for non paypal countries.

PayPal seems like a dream if you live outside the USA. I understand perfectly, I myself need PayPal to receive money from my own customers. My customers dislike using Western Union or wire transfers. PayPal is simply the fastest way to perform online money transactions.

I was in danger of losing some customers, so I was forced to come up with a way to get a PayPal account. I finally came up with the idea to open an account at PayPal UK. PayPal UK does not require you to have a banking account or major credit card. The only thing they require is a UK address– Even if you have never been there!

Once I registered, I began receiving money from various people for differing amounts of money. After you receive your first payment, PayPal sends you an e-mail to upgrade your account to Premium. You can easily move up to Premium account status, and most importantly– you are not asked to provide bank or credit card details.

But, there are two problems. First, you are limited to a maximum of 500GBP per month. To raise the maximum limit above 500GBP, you must verify your bank
account and provide other personal identification. The second problem, and it is a big one– is that you are not able to withdraw the money you have received. You are only able to receive money into your PayPal account.

Like all good things that must end some day, the party was over for me. When I logged on to my account I discovered the following message:

�

What can I do while my account access is limited? add funds by an electronic funds transfer place logos into your auction listings or on your website update your account information What can’t I do while my account access is limited? receive payments send or request money close your account

I emailed them 3 times, stating:

Oh my goodness, what happened? Yes, the party was clearly over. The worst of it was, that I discovered that my last payment transaction to another party was placed on hold! How could that be? I had no clue. If someone had sent me money that money had been properly credited to my account, why was my transaction to a third party held up? Was there an explanation? I e-mailed PayPal three times for an answer. There must be a logical explanation, and a way to retrieve my money. Even if I had actually lived in the UK and have since moved away, how could I possibly verify banking details at this time?

My advice: Never register with PayPal if you have any doubts about receiving your funds.

How Powerful Text Links Are.

Many bloggers are politically outspoken and view George Bush in a less than favorable light. Hundreds of people have linked to his biography page using the phrase “miserable failure” as the link text. This Google Search should show how powerful the internet is, and how powerful link text is.

Part of why it is so expensive to build a current search engine is that all of this feedback and linking takes time to measure and collect. The whole time you are collecting it, everything is changing. The text used in links is going to be very important in the foreseeable future.

Why are Links so Powerful?

When we write stuff about ourselves we have a tendency to lie. It is human nature to boost your own site. This is why meta tags and page copy are nowhere near as powerful as the once were.

Links from other webmasters are viewed by search engines as unbiased third party votes. While Yahoo! tends to put more weight on page copy than most other major search engines do. who links to you and with what words are the #1 ranking criteria for competitive phrases in all major search engines.

Many people look for links just thinking “link,” but ofter this is not the most effective way to do link building. If you think of the web as a huge social network and think of links as relationships you have a huge advantage over your competition.

You can do many manipulative things to make your ideas appear better than they are, but if you can find more natural ways to embed yourself in the social structure of the web you will likely become extremely successful.

�

New Oscommerce Release

Released new version of the popular ecommerce solution – oscommerce 3.0 Alpha. As soon as I found this news, I have visited their site, and downloaded the contribution, then installed on my localhost, to study “new born” oscom.� Sure it is much more improved, mostly in design, new template system, which allow you to manage the layout of the site form one file, besides it is CSS3! automatic thumbnails for products pictures, seo firendly urls work fine, improvement in code, definetly seen..

Look and feel of admin area changed totally, however is some non usual for me. But the major problem is you can not use that Oscommerce for a commercial site though. It is not upgradeable, and who knows how long it would take while old contributions would adjusted to this new oscommerce version, maybe months, or years

more details here http://www.oscommerce.com/about/news