Jump to content

MrPhil

Members
  • Content count

    8,156
  • Joined

  • Last visited

  • Days Won

    112

Reputation Activity

  1. Like
    MrPhil got a reaction from Ivan Raposo in Advance search result   
    "Advanced Search", as shipped, would of course search through all the products. It sounds like your Retail Locator is still searching the product tables, rather than your retailers table(s). Do you not yet have the retailer table(s)? With no keywords, and still looking at product information, I wouldn't be surprised if Advanced Search matched everything. I think you need to do a little more thinking about the subject, and get some more code and data in place, before you ask for help.
     
    Most stores which offer a "Find your nearest store" locator function carry the same goods in all stores. Do your stores carry different goods? I suppose that it is possible that your site is an umbrella for a number of  related, but not identical, brick and mortar physical stores. A visitor would want to find the nearest store which carries the particular goods they're looking for. The first thing would be to geolocate your potential customer, either through their IP address, or asking for a Postal Code (ZIP Code in US). Depending on how geographically dispersed your stores are, you might use something like Google Maps' geolocation to get a latitude/longitude, and from there, calculate the shortest "as the crow flies" distance from the customer to a suitable store. For stores in the same city, you might want to get a more precise customer location, and calculate street routes for shortest distance. Keep in mind that a potential customer might be reluctant to give their street address, so don't push the issue. Don't forget to actually show a map, rather than just showing an address, and show several nearest matching stores, not just the one you think is closest. A customer might find it more convenient to visit a more distant store that is close to their workplace, for example.
     
    Assuming your stores carry different goods, you could use products, manufacturers, etc. to narrow down the list of stores, and then find the closest store(s). Are the stores different enough to make this effort worthwhile? What do you intend to do if the potential customer wants some goods found only in one store, and other goods found only in another store? Can stores ship goods to each other so the customer only has to pick up in one place? They would appreciate that service.
  2. Confused
    MrPhil got a reaction from anmolllllll in Fatal error, webhost is stumped   
    If it's the same issue, there's no problem that it's a few months old. The problem is hijacking old threads to start talking about a different problem. That becomes very confusing when the matter being discussed suddenly lurches to something else, and the subject (title) line no longer matches up.
  3. Like
    MrPhil got a reaction from edoscript in Login with Paypal   
    IIRC, 5.010 is indeed the last full installation, and there are a number of incremental updates following it, up to 5.018. I haven't looked to see if all the updates will be applied in one "update" click, or if you have to update several times to get to 5.018, but you might want to keep an eye on what it's doing. I recall that there are gaps in the sequence (i.e., there are not 8 updates to get to 5.018).
    There have been some recent changes to PayPal (e.g., Connect vs Login), so 5.018 isn't the last word, but I think Harald has to manually do some code changes to bring it up to date. I don't know what his plans are there.
  4. Thanks
    MrPhil got a reaction from alex121121 in Auto Update Currencies   
    If the code only looks at the time of day, and doesn't keep track of the day on which it was last run, it's not very good code. Anyway, if you can't run a proper "cron" job, look at "poor man's cron" examples that do track when the last time something was run was, and kick off the run if enough time has passed. Such code would be started from some place in osC such as application_top.php. I think there may be a poor man's cron in one of the mass mailing add-ons, where you don't want to dump an avalanche of emails on the system, but just dribble out a few at a time, then wait for the next run of osC that's a few minutes later. I don't know if anyone has generalized a PMC to run arbitrary modules at arbitrary times/dates, but that would be a great feature for osC.
    Perhaps you would be better off if you worked with your host to understand what their limitations are on cron jobs. It's understandable that they want to keep out-of-control scripts off their servers, but cron is a necessary part of any non-trivial website. You got burned once by not understanding what they allowed, but that doesn't mean you can't craft a cron job that they will allow.
  5. Like
    MrPhil got a reaction from alex121121 in Auto Update Currencies   
    Does your host actually not let you run cron (on a Linux server), or do they restrict the kinds of things you can run, such as PHP scripts using 'php'? Mine does the latter, but they allow using cURL to run PHP scripts.
  6. Like
    MrPhil got a reaction from valquiria23 in PayPal App v5.018 Log In with PayPal is now dead   
    Pete, "Frozen" has PayPal Pro built in -- it doesn't use the paypal-app you linked to. However, it's at 5.010, so my concern is whether you need to install, configure, upgrade, and then apply the patches above, or if the Frozen files could be updated ahead of time (via my Frozen patch). The best would be to update Frozen (via patches) to PayPal 5.018 so that when installed, it's there (along with the patches above). No further manual operations for the store owner. I will try to find a Frozen implementation that's been updated to 5.018, and compare files, and see if I can first update my Frozen patches to 5.018, then apply the patches found above. That would be the most desirable thing for anyone using Frozen.
    Update: I've started looking at the PayPal app vs. what's in Frozen. A lot of the differences in Frozen are trivial stuff -- use of $_GET/$_POST, __construct, hard coded file and table names, etc. However, it looks like Frozen is still at PayPal 4.039 while the app is 5.010. There are a lot of non-trivial differences between the two that will take some thinking about (which one is correct to use). Then, there is still the issue of various fixes proposed in this and other threads, and whether they can be applied to 5.010, and whether it's possible to upgrade Frozen to have 5.018 out of the box. (does the "upgrade" change the PHP files?) This is not going to be quick.
  7. Like
    MrPhil got a reaction from valquiria23 in Ezsocial for osC2.3.4BS v1.0a   
    Since Google+ has mostly gone away, should we be thinking about removing it from stores? I never used it, but my understanding is that it's only available for "G Suite", whatever that is. Do the Google+ functions on osC still do anything, or are they just an embarrassment that osC hasn't been updated in ages? If it should go away, I can add that to my Frozen patch set. It will be up to others to fix Edge and the official product.
  8. Like
    MrPhil got a reaction from Demitry in Database Optimizer   
    Keep in mind that it's more than just changing function names mysql_ to mysqli_. Some parameter lists in the calls will also be changed, so you need to check those.
  9. Like
    MrPhil got a reaction from valquiria23 in reCAPTCHA addon recommendation   
    The method used to send mail (mail function or SMTP) has no direct bearing on spamming. The spammer was using some function (Contact form) further up the food chain to generate the spam. It is irrelevant whether PHP mail() or SMTP was used to send it out, unless your host has some sort of spam-blocking implemented for one but not the other. That could be why they asked you to switch to SMTP, or it could be for some entirely different reason (you should ask, just to know what's going on). Anyway, the spam-blocking (some sort of CAPTCHA or other anti-bot challenge) needs to take place in your application where the spammer is operating, such as at the Contact form, before it gets to the mailer. Simply changing the mailing method from mail() to SMTP will do nothing to control spam from your Contact form (although your host may then be able to intercept spam). And as mentioned before, reCAPTCHA is a specific, widely-used anti-bot CAPTCHA, but it's not the only game in town. If your host demands reCAPTCHA specifically, they're idiots and you need to find a new host.
    By the way, it's well known that CAPTCHAs are almost useless today, as bots have gotten so good at using them, so don't expect miracles (especially with any widely-used one such as reCAPTCHA, which hordes of bots can crack). Also, you may notice that reCAPTCHA images are heavy on recognizing vehicles, traffic signals and signs/markings, street signs, crosswalks, pedestrians, and the like -- it's widely suspected that Google is using reCAPTCHA to train its AI  for self-driving cars (and you're not being paid for your participation).
  10. Like
    MrPhil got a reaction from fantomen in Is there a module for automatic updating stock, products and prices?   
    You could certainly set up a processor on your PC to take the incoming .csv or .txt file and write a new .csv file back out, ready for either manual database import or through Easy Populate. There would be several data configuration files associated with it: markup per category, markup for specific products (override per category), and category per product. You would manually maintain these configuration files with an ordinary editor. When you run the new .csv or .txt file through the processor, it would tell you if any products are missing a category (likely new products) and you would update the category file and rerun the processor. A bonus feature would be to compare the new output to the previous one (saved from the previous time it was run) and only write new and changed entries, in order to run the update faster (dozens or hundreds of updates rather than tens-of-thousands each time).
  11. Like
    MrPhil got a reaction from fantomen in Is there a module for automatic updating stock, products and prices?   
    Why are you going into Excel (or any other spreadsheet) to add columns and calculate prices? You should be able to read the CSV file with a scripting language such as Perl, and write it back out with new columns with prices and such. How many manual decisions do you need to make for each product? Can it all be reduced to a formula? What about categorizing new products -- is that manually done? You should only have to do it once, for a product or manufacturer, and keep that information around in a file. For routine functions, you should be able to take an incoming CSV or txt file and convert it to something useful to read in either manually or via Easy Populate, without any human intervention.
  12. Like
    MrPhil got a reaction from fantomen in Is there a module for automatic updating stock, products and prices?   
    There are some "Easy Populate" modules floating around, that let you update product information from a CSV (text) file. Take a look at that and see if any do the job.
  13. Like
    MrPhil got a reaction from fantomen in How to install Paypal to Frozen osCommerce Online Merchant v2.3.4.1 CE   
    777 is NOT correct on many servers. They will give a 500 error because this is a security exposure ("world writable files"). You start with the minimum permissions on any file (typically 644) and add "write" permissions (664, then 666) until you get it working. Very few servers now require PHP files to be marked "executable" (755, 775, 777). This applies to files that PHP needs to write to, and depends on how PHP is configured (especially, what user group it's running under).
    777 was safe to do back in ancient times, when you could trust everyone sharing your Unix computer. You can't anymore, especially on a server shared with hundreds or even thousands of strangers. Giving them "world write" access to your files is asking for trouble. If someone blithely tells you to "chmod 777 your files", they're an idiot. Don't listen to them.
  14. Like
    MrPhil got a reaction from mcmannehan in Grundsätzliches Module   
    First of all, make sure you are installing a current version of osCommerce, one that is PHP 7-ready, secure, mobile-friendly, and up to date with many new features. That would be osCommerce 2.3.4.1BS "Edge" or "Frozen". As you are not experienced with osC, I would recommend "Frozen" (see my signature below for the link), even though it is not PHP 7.2-ready and has a list of patches. Under no circumstances should you even think about installing the "official" version downloadable from this site. It's obsolete, even though it's also called "2.3.4.1".
    via Google Translate:
     
  15. Like
    MrPhil got a reaction from raiwa in Unusual shipping requirements   
    No harm done with responding to a 13 year old post, if the problem and solution given might still be relevant to someone. Since the thread would have been so deeply buried, I would assume that Jack would be aware of its age. Likely the OP is long gone, but in case there are others in this boat...
    As long as we're having a pleasant chat about unusual shipping requirements, is there anything built-in to restrict certain products to certain geographic zones (such as countries)? For example, physically shipping goods only within the USA, but digital downloads anywhere not embargoed? I'm sure I could code up something, but if someone has already done the work... the key is to alert the customer well in advance before they load up their cart with a mixture of physical and virtual goods and then try to check out.
  16. Like
    MrPhil got a reaction from videod in Oscommerce 2.3.4 PHP 7 Real Upgrade (not Hotfix)   
    There is no update package. You need to install the latest "Edge" version and re-do any customizations you had done. I wouldn't try to update just one small part -- do the whole thing to do it right. I'm not sure if Edge is fully PHP 7.2 compatible -- it may be. Frozen is 7.1 compatible, and definitely has some problems on 7.2. See my signature for links to Frozen and Edge. "Edge" is labeled "master" on GitHub, which may be why you couldn't find it. Be aware that Edge is under constant development, and may not be stable enough for a production store, while Frozen is quite stable (although I would apply the various fixes listed in the thread). No one knows if Gary plans to release an updated Frozen, or just a stable version of Edge to eventually replace it.
  17. Like
    MrPhil got a reaction from ArtcoInc in Who in the EU has heard of GDPR and will it affect you   
    Seen on the 'net. Sing along!
    He's making a list,
    He's checking it twice,
    He's gonna find out who's naughty or nice,
    Santa Claus is -- in contravention of article 4 of the General Data Protection Regulation (EU) 2016/679.
  18. Like
    MrPhil got a reaction from abcdefg in Oscommerce 2.3.4 PHP 7 Real Upgrade (not Hotfix)   
    Not a valid reason. The "official" release(s) are very old and outdated, and totally unsupported. You might as well move to the only version with any semblance of support, which is 2.3.4.1BS Edge/CE/Frozen. No one in their right mind is going to invest any effort into really "fixing" the official release, when most of what you're asking for is already done in Edge.
    It looks unlikely that Edge will ever be "official" in the sense of its being the downloadable version from this site. The owner of osC, Harald, keeps disappearing for long periods. He promises much, but in the last few years has delivered nothing (unless you want to count the 2.3.4.1 hot patch, which merely suppresses PHP 7 deprecated warnings, and thus is useless).
  19. Like
    MrPhil got a reaction from Dennisra in Google Adsense and https site   
    If the ads that Google is serving you use http in their addresses, such as for images or Javascript, many browsers will suppress their appearance ("mixed content") due to http (non-SSL) content on an SSL (https) page. You should be able to see this by the icon shown next to your address in the browser address bar. The proper solution is to specify that you want SSL content in your ads, so that everything on the page will be shown by all browsers. I don't use Adsense, so I can't tell you how to do this.
  20. Like
    MrPhil got a reaction from kymation in Frozen: tep_draw_button problem   
    That's one of those cases where the PHP maintainers are going around tightening up their code to better match the published specs. This often means that site code that worked before suddenly stopped working... technically it was invalid (sloppy coding) in the first place, but no one complained (until now). I wouldn't be surprised to see this problem popping up here and there in any PHP code, including osC.
  21. Haha
    MrPhil got a reaction from Stephan Gebbers in Who in the EU has heard of GDPR and will it affect you   
    A nice layman's view article: https://www.scotsman.com/news/politics/insight-the-gdpr-revolution-we-can-t-opt-out-of-1-4742104
    There are apparently some unresolved data issues, which will need to be settled by the courts, such as a beauty salon owner required by her insurance company to hold on to customer medical data for 6 years, even if the customer requests that it be deleted. Which takes precedence? If the customer demands that her data be deleted, does she forfeit any claim that could have been refuted by the salon had it kept the data? Or is the salon in trouble for keeping that data after being told to delete it? What if the data is simply taken offline -- short of a search warrant, how would a customer know what has been kept, short of suing for malpractice and seeing what's there?
    I like the joke in the "letters" section:
    "I've found a really good GDPR consultant". "Can you give me their email address?". "No"
  22. Like
    MrPhil got a reaction from Dan Cole in Who in the EU has heard of GDPR and will it affect you   
    I agree 100%. Being outside the EU, I am not going to fully implement GDPR, just the parts that are common sense and are justifiable, and should be followed by anyone holding private information.
  23. Haha
    MrPhil got a reaction from Stephan Gebbers in Who in the EU has heard of GDPR and will it affect you   
    A nice layman's view article: https://www.scotsman.com/news/politics/insight-the-gdpr-revolution-we-can-t-opt-out-of-1-4742104
    There are apparently some unresolved data issues, which will need to be settled by the courts, such as a beauty salon owner required by her insurance company to hold on to customer medical data for 6 years, even if the customer requests that it be deleted. Which takes precedence? If the customer demands that her data be deleted, does she forfeit any claim that could have been refuted by the salon had it kept the data? Or is the salon in trouble for keeping that data after being told to delete it? What if the data is simply taken offline -- short of a search warrant, how would a customer know what has been kept, short of suing for malpractice and seeing what's there?
    I like the joke in the "letters" section:
    "I've found a really good GDPR consultant". "Can you give me their email address?". "No"
  24. Like
    MrPhil got a reaction from Stephan Gebbers in Who in the EU has heard of GDPR and will it affect you   
    Easy there! If you do business in the EU, and therefore handle the data of EU citizens, this applies to you. If you are located outside the EU, and are dealing with non-EU citizens' data, it doesn't apply to you. If you need to implement anything new to meet GDPR, it should be a superset of data-protection requirements anywhere else in the world, and you can handle everything the same way. Now, if you're physically located outside the EU, I doubt they'll have much leverage with you, even when dealing with EU citizens. If you're a small shop, and make a reasonable effort to protect personal data, frankly I doubt they'll bother coming after you. They've got bigger fish to fry with Amazon, Google, etc.
     

    From a very quick scan of the Wikipedia article, it sounds like mostly common-sense data protections. I don't see anything that says the Data Protection Officer has to be a discrete person -- it can be another hat you wear (president, web guru, shipping clerk, bottle washer, DPO,...). People can request that their data be moved to another system, which is not applicable if you don't run elsewhere (what are they trying to accomplish here?). People can request to be forgotten (you erase their account information upon request, where that doesn't conflict with statutory data retention requirements or good accounting principles). Data breaches have to be reported to the appropriate authority. Customers have to explicitly consent to having data collected (it should be enough to add "By providing this information, you are consenting to our collecting it" to registration and PWA pages), and there are restrictions on collecting information from children. There are some privacy provisions which anyone handling personal data should already be implementing, at least for the type of data an online shop would hold. There may be some extra i-dotting and t-crossing to be done, but what else is new?
  25. Like
    MrPhil got a reaction from Demitry in Database Optimizer   
    What's this "Blu-ray" thing you old geezers keep prattling on about? Don't you watch a movie like everyone else does, by swallowing a pill? Oh wait, there's now a topical cream containing nanoflash chips, but it's facing stiff competition from the clip-on movie earring.
×