Zen Cart Version 1.5.5F Released

Article Date(s): 11/29/2009 - 12/31/2035
News from the zen cart developers regarding extra folders just released today as follows:

In a standard Zen Cart install, there are a few additional folders provided which DO NOT need to be uploaded to your live webserver.
In fact, leaving those folders on your server can pose some security risks if not used as intended.
While most of the risks are minor in that attempting to access some of those files/scripts/documentation could reveal some information about your server which might allow more sophisticated hack "probing" to occur, there are some more significant risks including unauthorized access to information on your server or even "accidental" wipe of your whole database in the case of the zc_install folder being left online.

So, it's important that after you've installed your site and are satisfied that it's working properly, including actually doing live transactions to test ALL the payment and shipping modules you're using on your site, be sure to do some cleanup:

REMOVE THE FOLLOWING FOLDERS (and all the files inside them), TO MINIMIZE SECURITY RISKS:
- /docs
- /extras
- /zc_install
- /install.txt (this file can be removed, too)
It is safe to keep these files on your own computer, since they can be used as references/documentation, or used to aid in troubleshooting as diagnostic tools, or for upgrading/installing again in the future. But those folders/files should *not* be on a live webserver.


Optional:
Additionally, *IF* you have no intentions of supporting downloadable products or music-media products, you can *also* remove these folders:
- /download
- /media
- /pub
(And you'll need to go to your Admin->Configuration->Attribute Settings->Enable Downloads, and set it to False to turn off the warning message about the missing download folder)
In the future, if you choose to add downloadable products to your site or music-products, you will want to re-upload these appropriate folders (and their contents) to your server again, and assign appropriate permissions. (See FAQ are for appropriate permissions instructions.)
__________________
Zen Cart - putting the dream of business ownership within reach of anyone!
Back

Shopping Cart

Your cart is empty.

Customer Reviews

Judy is an "Angel"

Judy is an "Angel"! She rescued us from so much frustration and wasted time that we encountered from previous "companies". It's so nice to get...
Read More ->


Guru Judy

I have indeed found my new guru in Judy!! She literally saved my website and my sanity. For the past year I have been on a roller coaster ride with...
Read More ->


Goes above and beyond!

Judy has gone above and beyond while developing our website, she even corresponded with our old website guy (that we were leaving) so that we...
Read More ->


Judy Gunderson saved my bacon!

Judy Gunderson saved my bacon! Actually, she saved my store database, putting it back together after a series of unfortunate incidents in which...
Read More ->


Better than I could ever hope for

Wish I had known of Judy long ago. Too many bad memories of expensive, non responsive IT help before. Found Judy looking for info on how to update my...
Read More ->


Who's Online

There currently are 6 guests online.
Copyright © 2004 - 2020 ZenCart Ecommerce Website Design
Zen Cart Templates Zen Cart Guru
Powered by Zen Cart