Magento Version 1.3.2.4 Security Update - XSS Vulnerability Fix

Magento Version 1.3.2.4 has been released in response to a major security issue that has been identified in all prior versions of Magento. The issue affects the customer account registration page, if you’re reluctant to upgrade, or if you’ve written to core files (shame on you), there are a couple of solutions.

More →

Magento Training In London and Manchester

I am really delighted to announce that I will begin running Magento training sessions at the end of August. 3 different courses are planned, however, to begin with I will be running pilot one-day courses in London and Manchester titled ‘Magento 
Theming 
for 
Front‐End
 Developers’.

More →

Tips For Creating Dynamic Category Landing Pages

This is quite a common want, so I thought I would put together a quick tutorial with some ideas and pointers. My main goal will be to give you a starting point for building a static block and PHTML file that can be applied to top level categories to dynamically create a block with of all the subcategories.

More →

The Future Of Magento Connect

As I mentioned in my previous post, several announcements were made during Mage::Camp about up and coming changes to Magento Connect; most noteworthy (from a developer’s standpoint) is the development of commercial licensing, encoding and payment handling.

More →

Highlights From Mage::Camp

Big thanks to OnTap and Varien for a great show at Mage::Camp, just wanted to give readers an insight regarding some of the key things that were discussed with regards to the development of Magento in the coming year.

More →

PCI DSS Compliant Payment Gateways Available Through Magento Connect

Having a PCI DSS compliant payment gateway is essential for most businesses, especially for enterprise solutions. Even some of the better known gateways are not PCI compliant, the most notable example in the UK is RBS WorldPay, who were recently dropped from Visa’s list of compliant payment providers.

What follows is a list of gateways that use a PCI compliant service provider based upon the VISA list and gateways available through Magento Connect.

More →

Installing Google Analytics On Your Magento Stores

Installing Google Analytics is simple, just extract your unique identifier from Google Analytics and add it to the Google API section of the configuration panel. The unique identifier for each site can be found next to the URL in your Google Analytics control panel.

More →

Varien Launch Magento Enterprise Edition

Varien yesterday launched a new enterprise version of Magento, interestingly many regular users of the forum will note that a lot of the additional functionality included in this new version is what ‘community edition’ users have been crying out for, particularly the ability to limit catalog access to certain customers (I assume on a group basis) by category or globally across stores.

I think it will be interesting to see in the coming months if any of the enterprise functionality makes it into Magento Connect, be it on an open source or commercial license. This would give community edition users the opportunity to ‘bolt on’ enterprise features.

More →

Adding Multiple Products To The Cart Simultaneously

In a previous post I looked at creating a product on the fly and adding it to the cart automatically. However, if you are using Magento without the catalog then when you transfer customers from your catalog to the cart and checkout you may need to create and add multiple products to the cart.

More →

Fix Cron.php So That Product Catalog Prices Stick!

Even after setting up a cron job (Magento Wiki Article: Setting up a Cron Job) to keep special catalog prices up-to-date, many users (including myself) are still finding that prices do not ’stick’. To solve this issue, edit Cron.php (in the root installation directory) so that the lower half is as follows:

More →