osCommerce Vulnerability Fixed on All SiteGround Servers

As probably most of you know, osCommerce is a shopping cart application for creating and managing online stores. It is very widely used and has many implementations and variations. Many popular shopping cart applications like OscMax, ZenCart, CreLoaded, etc. are actually based on osCommerce and use its code.

Unfortunately, for quite a while now, there has been a known vulnerability in the osCommerce code and the code of the applications based on it through which a hacker can exploit the admin area and take malicious actions. Although on the osCommerce official website there is some information how the problem can be avoided (http://svn.oscommerce.com/jira/browse/OSC-1069), the vulnerability has not been fixed yet in the latest osCommerce release and with each new download and installation of a related shopping cart software, new people and online stores become potential targets.

When there is a vulnerability in such a popular application and many sites are at risk, we at SiteGround do not believe in the approach: “let each user find and apply the bug fix him/herself”. First, most of the users understand about the issue only after they are already affected. Second, many of them are unable to apply the fix themselves. To protect our customers from hacker attacks, some of our best technical experts investigated the problem in details and applied a global solution to all potentially vulnerable customers’ applications.

The results from our osCommerce patch operation are:

  • the osCommerce package available for installation through Fantastico has been patched so that the new installations are not vulnerable to the exploit;
  • all future transfer clients with osCommerce-based websites will get the vulnerability fix as part of the website transfer service we provide;

We are proud that once again SiteGround has provided a security service high above the standard level for a shared hosting company. Our knowledge and reaction in situations like these make us believe that we do provide the best osCommerce hosting.

Hristo
Product Development – Technical

[subscribe_cta]

The London Trip

We have been quiet for a while, so I thought you might be interested in what’s new at SiteGround. Well, Reneta and I went to London at the end of last week for a business meeting with the CEO of The Planet (our main datacenter located in Texas, USA). It was only a two-day trip, very short but also interesting.

nobu1

On one hand we had a productive meeting with a major partner of ours and on the other, we enjoyed one of the most amazing restaurants we’ve ever been to. It’s called Nobu and as it turned out it is a very popular place in London. Maybe due to the fact that Robert De Niro owns the place and once in a while, you might see a movie star dining there. Well, we didn’t see any stars, but we were totally amazed by the food. I hate sushi, honestly, and when I entered the restaurant, I was hoping I won’t have to eat any raw fish out of courtesy. But everything we ate there was superb! The chef is incredibly good in mixing the spices and achieving extraordinary combinations. We tried several types of Sake too, which was a terrific experience. So, take this as a referral – if you are willing to spend some quality money in London, go to Nobu 🙂

siteground_kitten

Now, you would say, a two-day trip (even a day and a half) is not a long time to be away from office. But, we are full of surprises. When we came back, we found out that we have a new member of our team. Well it’s a kitten, but you know, we are very tolerant…and it’s so cute, so irresistible! Actually, we are now looking for a respectable home for the kitty. Anyone interested, be quick – applications are piling up 🙂 Also, the little boy doesn’t  have a name yet, so feel free to share with us your suggestions.

So, don’t think we are just losing time around here. We are also working very hard on a few new projects that are to be launched shortly. But, I won’t say a word now, just wait and see what’s coming next…

In the meantime, you might want to see the kitty’s pics on Facebook.

Tenko

[subscribe_cta]

SiteGround partners – Singlehop

We stated that our blog will be about life behind the scenes. And life behind the scenes is not only SiteGround employees, procedures, and customer service policies. It is also about our partners. In this first episode of “SiteGround Partners” series, I am pleased to say Hello to Dan Ushman from SingleHop. He agreed to answer my questions in an email interview for you. See what Dan & Singlehop have to say about their experience with us.

singlehop

Tina: Tell me how long SingleHop has been doing business with SiteGround and what are the services you provide us with?

Dan: SiteGround and SingleHop joined forces in the middle of 2008 to offer dedicated servers to customers whose websites have outgrown their shared hosting accounts. SingleHop provides infrastructure and automation services while SiteGround focuses on sales, marketing and customer service. SiteGround has thrived due to their unrelenting commitment to its customers needs (both technical, and ease-of-use.) So, overall the relationship is truly unique because it is more than just a business relationship, our partnership has powerful synergies that produce some of the industry’s best technical innovations and customer experiences.

Continue reading “SiteGround partners – Singlehop”