Forum Moderators: buckworks
I'm not sure how this works, has anyone got any good tip on what to use or check out?
thanks for any help.
[edited by: DaveAtIFG at 12:59 pm (utc) on July 31, 2004]
[edit reason] No specifics please [/edit]
I like OSC because of the SEF URLS (not out of the box but relatively easily accomplished), and the wealth of contributions. ZenCart does not have these.
I like ZenCart because I think out of the box its a better cart, because I feel despite the URLs it has more potential for optimization, and perhaps most because it better utilizes templetization (Changing some elements in OSC requires changes to all individual pages, ZenCart is designed in a different manner and avoids this).
I think neither of these carts (strictly) necessitates PHP (off the top of my head the only php thing that would need be done is customizing page text defined in variables - there are a number of references to this on the projects respective sites and it would not require php expirience), but I think both of them can be highly customized by a decent programmer and would most definatly recommend PHP (or a desire to learn).
Basically, when we had our security team check into OSC (we were interested in using it ourselves), we found some disturbing problems in the latest release that could be easily "broken" and depreciated:
Greatest conern is the use of register_globals=on. Also, for example, the use of http_get_vars() and http_post_vars() in attempt to protect incoming variables. Lastly, OSC is not a fully OOB package--it's "spaghetti code" (PHP & HTML) littered with partial classes.
With the first full release of PHP5, this complicates OSC even further, creating both a security risk *and* a longevity problem. Frankly, OSC will not even work with PHP5 & Zend Engine II.
There is no doubt OSC will rewrite the application to be globals=off complaint, and not call deprecated or removed functions. I believe they got themselves into this mess by using a ragtag team of contributors, with all due respect (it is a free application, I know).
The problem is that will take a few months, and a million headaches to fix it. So, we had to pass on it. However, there are other open source alternatives available with a solid foundation to build upon.
X-Cart uses SmartyTemplates. Their LiteCommerce version is fully OOB, which is a matter of preference. Not sure on Zen Cart; others may be able to help or check out their forum [zen-cart.com ]
At this juncture, a custom solution is all that's left for us in the **nix platform(s), but I've heard nice things about Monster Commerce (asp/IIS) for those who do not mind Win2K/MSSQL servers. Although, they allegedly raised their price recently, and I believe you must host with them in order to use the application, which obviously blocks client-side customization.
I suppose it all depends on how far you wish to go on the e-commerce side of things. Admittedly, most clients would be well suited with standard off-the-shelf carts.
CF