The New osCommerce Project this week formally abandoned all plans to complete the moribund osCommerce 3.0 and 4.0, citing an outdated and near-obsolete code base. The group will instead build a whole new cart from the ground up using a fast and flexible PHP framework called Kohana to allow rapid development.
There had been no work done on osCommerce MS3 for the last two years when the New osCommerce Project, spurred by long-time osCommerce developer Rhea Anthony, broke away and quickly completed the neglected osCommerce MS2.2 last November. Prior to the group's resurrection of the original program, the osCommerce forums had been assaulted for months with masses of porn spam, and the project had been slowly dying of neglect.
The break-away group's rapid completion of the almost-completed program shook the original program's founder Harald Ponce de Leon out of his lethargy long enough to work again on the MS2 ARC streams and the MS3 stream. This culminated in the original osCommerce releasing an MS3 Alpha 5 release in March of this year. The release was labeled "production-ready" but it remains far from that.
After the new osCommerce Project successfully released the final osCommerce MS2.2 it immediately turned to developing a new framework onto which the new shopping cart would be bolted. The group realized fairly quickly that creating a framework would be demanding and time consuming, and that there were already excellent frameworks that would serve the purpose and allow more rapid development.
The group chose the object-oriented Kohana framework to help speed development of the new open source cart, citing its speed and light weight in comparison to, for example, the slow and resource intensive Zend framework used by the popular open source cart Magento. Many complain that Magento is slow because of its dependence on the bloated Zend framework.
The New osCommerce Project had decided at a team meeting in January to keep the name osCommerce even though it would no longer use the osCommerce code base. In April the team decided to completely re-brand the new cart as soon as they decided on a new name.
The new cart will not be released as osCommerce v4.0 but will be released as osQuantum v1.0. The "OS" signifies the group's ongoing commitment to Open Source Software. The "Quantum" is the name of the new cart.
A schedule for osQuantum's first Alpha release is expected to be released within the next month.
About the Kohana Framework
The Kohana framework, a cutting-edge offshoot of the framework Code Igniter, is speeding development of the new cart. What this means to users is that many features that will be needed in the new open source cart already exist in the pre-existing framework.
For technical folks, Kohana uses the Model-View-Controller architecture, as do other PHP frameworks, which provides database abstraction, event handling and other standard features. It follows strict PHP5 Object-Oriented programming protocols and is very professional compared to some other frameworks. Kohana has error logging, an easy-to-use template system, API consistency support for internationalization, and more.
Unlike other frameworks however, Kohana is a very simple and flexible, fast and powerful framework that provides only the essential features common in the majority of applications. If need more features you can add them via the module system. The framework is easy for experienced developers to learn as well as those new to the system.
Continuing Support for osCommerce 2 Final
The group plans to continue to support osCommerce version 2.0 (Final) from its forums at http://forums.oscommerceproject.org. The group has also recently released four bug fixes which apply to versions RC1, RC2, RC2a, RC2b and 2.0 (Final), which are not available from the original osCommerce.
In Other Open Source News CRE Loaded Releases PCI-Compliant Version 6.4The CRE Loaded version of osCommerce left behind its unsuccessful 6.3 version with the release of a new 6.4 version designed to help small merchants meet strict PCI or Payment Card Interface credit card processing standards. The new version has had all non-PCI compliant payment modules stripped from the program, and only the new "CRE Secure" module is pre-installed. The new payment module allows a merchant to seamlessly process credit cards on a secure third-party site that is branded to look identical to the merchant's site.
Merchants must apply for a new merchant account with integrated processors from First Data, GlobalPayments, Elavon, TSys, Chase PaymenTech or JetPay in order to take advantage of the pre-installed CRE Secure payment module.
Small merchants can also meet PCI Standards by using an off-site processor such as PayPal, but the group points out that the seamless payment experience is lacking with this method as the PayPal Web site allows only rudimentary customization.
By 2010 all merchants processing credit cards must adhere to strict security standards or risk losing their merchant accounts. CRE Loaded's PCI 6.4 will make it easy and inexpensive for small vendors to adhere to these standards.
For most small online vendors, those with fewer than 20,000 transactions per year, the new strict PCI security standards also require a regular self-audit regarding handling of all customer data. The group expects to release plug-in modules for its CRE Secure payment system for other open source ecommerce programs including Zen Cart and osCommerce, to allow users of all programs to quickly achieve PCI compliance.
Zen Cart Announces Security Issue and PatchA security issue has been discovered in the Admin section of Zen Cart in versions
Up to and including 1.3.8. The vulnerability requires an attacker to know the URL of your Admin. The Zen Ventures group recommends changing the name of the Admin folder immediately on installation of Zen Cart.
The group released a security patch that takes advantage of Zen Cart's easy to use "Override System" for easy updating. The patch is available on Zen-Cart.com and is recommended for all Zen Cart stores version 1.3.8 or earlier. Earlier stores may need to manually install the patch.
Kerry Watson is a regular contributor to ECommerce-Guide.com, as well as a consultant and author of 14 books in the OSC industry. Her Web site is osCommerceManuals.com.