How secure is 68Classifieds?

[Maffo]

Also, how many different categories do you have setup on your existing system? Do you have extra fields?

[Tim_A]

Thread's kinda been hijacked

Any answers for the original questions (posts 1 & 2) gratefully received

Cheers

Tim

[Slimjim]

There are 6 top categories and 47 sub-categories. I can set these up myself on 68Classified if need be.

As far as users is concerned there doesn't seem to be a clear split in XZero between users and their data. I've just been having a look at it - and see that most of the important data is in three table - the one that contains the advert heading, content and user details - and the the other two containing the top and sub-level categories.

There are other tables - showing which adverts are featured and paid for - important - but when push comes to shove (so to speak) - not as important as getting the main content converted.

All the best,
Jim

[Lhotch]

68C stores user data in one table. The ads themselves in another table. Any extra fields that are specified are defined in yet another table and the values of the extra fields in yet another table.

So, whats going to have to be done is you would need 68C installed. All your categories would need to be created and any extra fields would need to be created as well. Then your packages could be defined.

If xzero has user data stored with ads then I would would probably take a 2 step approach and bring user data over first and once done bring the ads over.

Do your ads have images and if so how are the images stored? Are they simply files in a folder or are they stored in the database? This is yet another obstacle to deal with.

[Slimjim]

Originally Posted by Lhotch

68C stores user data in one table. The ads themselves in another table. Any extra fields that are specified are defined in yet another table and the values of the extra fields in yet another table.

So, whats going to have to be done is you would need 68C installed. All your categories would need to be created and any extra fields would need to be created as well. Then your packages could be defined.

If xzero has user data stored with ads then I would would probably take a 2 step approach and bring user data over first and once done bring the ads over.

Do your ads have images and if so how are the images stored? Are they simply files in a folder or are they stored in the database? This is yet another obstacle to deal with.

The photographs are all stored in a folder.

I've now purchased a copy of 68Classifieds - but I've not got the software yet - as for some reason the message in the customer area is that they are awaiting completion of payment. I paid via Paypal and payment has been completed. I've emailed support.

Is this normal? Generally when I buy software I get to download it instantly.

All the best,
Jim

[Maffo]

Just give it a chance, sometimes these things can take an hour or two to process.

[dojo]

I don't thiink it's that secure. I have the site installed for 3-4 weeks and now I find it's HACKED. The database is messed. It's the first time a site of mine gets hacked and has the database touched. Most of the time we're dealing with "defacing". The nice thing is that I have lost everything on the site and have to start all over again. memo to self again: backup frequently. paying 100 USD for a script doesn't mean it's a secure one. Jesus.

[Tim_A]

sorry to hear about your site, that's more than a little concerning, however if you're on a shared host it could be a number of possibilities as to why you were hacked perhaps not even related to 68.

I'm still waiting for an answer as to whether version 4 is included in this statement on the site:

Safe and Secure
68 Classifieds has been audited by Gulftech Research and Development to make sure it is free from vulnerabilities.

[Lhotch]

Just the other day a new release of V4 was released to fix a found vulnerability. The fix was released the same day the vulnerability was found.

Another thing to ask yourself is how did you contribute to the security of your own site? Did you change the prefix of the database or leave it default? Did you change the admin user name or leave it default? Leaving anythging default makes it that much easier for hackers so if you did leave those settings default then you are partially to blame.

As for you having to start over, your lack of a backup is your own fault, not the softwares.

[Tim_A]

Originally Posted by dojo

It's the first time a site of mine gets hacked and has the database touched. Most of the time we're dealing with "defacing".

If dealing with hacks is a regular occurence for you, i'd seriously question your host also