We have become aware of a security vulnerability in Shop-Script PRO and PREMIUM versions (predecessors of WebAsyst Shop-Script), which allowed performing SQL-injections in storefront. Input data was not properly handled by index.php, cart.php and printable.php scripts.

We have released a security patch to fix this vulnerability.

All users of Shop-Script PRO and PREMIUM (important!): we highly encourage you to download and install this patch! If you purchased PRO or PREMIUM versions, the patch is available for download inside your WebAsyst Customer Center account (”Download — Shop-Script PRO and PREMIUM” screen). Installing is easy: download and replace your files with the files from the patch (index.php, cart.php, printable.php and all other files from the archive).

Users of WebAsyst Shop-Script: no need to do anything. No vulnerabilities have been found in WebAsyst Shop-Script so far.

If you have any questions, please contact customer support.

Cart of the week: WebAsyst Shop-Script in Practical eCommerce magazine:

http://www.practicalecommerce.com/articles/1102-Cart-of-the-Week-Shop-Script-by-WebAsyst

• Enhanced payment and shipping modules now allow adding their respective logos which makes checkout process visually more accurate for your clients. Each payment and shipping method now has a Logo field where its URL can be posted. You can use free icons for shipping and payment type which we posted earlier in our blog: http://blog.webasyst.net/payment-type-icons/.
• Added “Shipping summary” form which includes order details and customers location
  according to Google Maps service. This is very useful for local courier deliveries. Modified Tag cloud code. It works faster now and search of the tag terms is performed only in actual tags assigned instead of product name and description as before.
• Minor improvements:
  — Shrink large product image option in the Settings / Products. It allows to automatically downsize original images to the expressly specified size, instead of keeping them as is.
  — RSS feed of the product reviews now includes the product name and its page link.
  — Fixed site maps URL issues when original one ending with “?app=SC” resulted in errors with some submission services.
  — Predefined order statuses (Cancelled, Pending etc.) now can be translated using standard language tools of the administrative back end.
  — Fixed a number of minor bugs reported by users since the last update.

We have released a new version of WebAsyst Mail. In fact, WebAsyst Mail is now a fully functional mail web client with advanced capabilities. You can use it to receive messages, send private or bulk email messages, keep and organize corporate email archive, etc.

What’s new:

1. Inbox folder. Now you can use WebAsyst Mail to receive messages. In the Inbox folder you can add mail boxes of two types: internal – based on your WebAsyst account domain name (e.g. alex@youraccount.webasyst.net), and external – linked to an email address residing at a remote mail server. It allows you to gather in your single WebAsyst account all messages which you receive in your boxes that may reside on different mail systems; e.g. @aol.com, @gmail.com, @yourcompany.com. It allows you to access all your correspondence from the same place. At the same time you may continue using proprietary web clients of these mail systems, as well as desktop mail programs like Thunderbird or Microsoft Outlook.
   NOTE: To see Inbox folder in an existing WebAsyst account, you must specify proper user access rights to your Inbox folder. To do so, navigate to user access rights page and enable “Can access Inbox” option in the Mail service section.
2. Compose and send message functions have been fully redesigned. Previous version had been designed primarily for bulk message sending and consisted of several steps. Our new compose message form features a convenient recipients selector, enhanced message editor, and fast one-click Send button. Sending function has been significantly improved, and now works stably and quickly both for immediate and scheduled sending, no matter how many recipients you have added to your message.
   NOTE: Recipient addresses, specified in “To” and “Copy” fields will be visible for all recipients of your message. If you want recipients to see only their own addresses, you must use “Lists” option. Create contact list in WebAsyst Contacts and then send your message to this list from WebAsyst Mail.
3. Drafts, Pending, Sent and Templates. These are new private folders which appear in your navigation panel. These folders are available only for the current user. Every new message, which has not yet been sent, appears in “Drafts”. Once sent, this messages moves to “Sent” folder, and etc. From these private folders you can move messages to any shared folder in “Available folders” section.

In addition to the major changes described above, we have significantly redesigned, enhanced and accelerated Mail interface, using AJAX. On the compose and view message pages we have removed all unnecessary elements and devoted as much space as possible to the message content. We have added new functions to reply and forward messages. Template selector now shows a thumbnails gallery to make choosing a template easier.

Refer to WebAsyst Mail Manual for detailed description of new Mail.

Create WebAsyst account and start using new Mail.

The long awaited Shop-Script update is now available.

How to install:

• Users of Shop-Script PHP software (please read before you run software update!):

  Before you run software update in WebAsyst Installer, apply chmod 777 to index.php file that is located in the root of your WebAsyst installation to allow WebAsyst Installer to rewrite this file (enable write permission for this file; you can do this using your favorite FTP client software). Write permission for index.php should be enabled before you start software update to allow update routine to be applied successfully.

  Please contact customer support if you have any questions.

• Users of WebAsyst Shopping Cart hosted service:

  Update has been successfully applied to your accounts. You don’t need to do anything.

Below is the list of changes in this update:

1. Support for time zones (storefront time zone is configured in your store back-end settings screen, server time zone — in WebAsyst Installer settings).
2. New screen “Tools — Sitemaps” which allows creating XML Sitemaps for your storefront. Sitemaps file is an XML file that lists URLs of your website and allows search engines to crawl your site more intelligently.
   After you install this software update, you should manually activate “Sitemaps” screen. To do this, go to WebAsyst Users application and grant your WebAsyst user access rights to the new “Sitemaps” screen (you may allow other users to access Sitemaps as well).
3. New screen “Tools — Print forms” which allows configuring various order forms that you can print directly from your order info page. Some of the forms are available for customer in “My account” tab in storefront.
   After you install this software update, you should manually activate “Print forms” screen. To do this, go to WebAsyst Users application and grant your WebAsyst user access rights to the new “Print forms” screen (you may allow other users to access print forms configuration screen as well).
   Currently there is only one order form — invoice. We are working on adding new order forms such as shipping labels for UPS, FedEx and other supported shipping carriers. We appreciate your feedback regarding order forms; please tell us which print forms would you like to have in your online store (email us or post in our forum). We are open to your suggestions.
4. SEO, improved page layouts, JavaScript optimization.
5. WYSIWYG-editor: new features, ability to add custom JavaScript code, widgets and iframes directly to your texts.
6. 5 new skin templates: Lucid, Aqua, Sale, Tableware, Flowers.
7. Bulk image upload in “Design — Image Uploader” screen.
8. A lot of tiny features and improvements:
   — product search in back-end,
   — settings option for enabling/disabling product code (SKU) display in storefront,
   — the ability to define text direction for a certain language (left-to-right, right-to-left),
   — improved product import from CSV files,
   — order’s “Print version” now includes all customer data including custom registration form fields (e.g. phone number),
   — product duplicating feature,
   — now your customers have the ability to enter how many items to add into shopping cart when ordering something in your storefront (to enable this feature, go to built-in design editor’s “Product info” tab, double-click “Add to cart” element and enable corresponding settings option),
   — in the back-end “Settings” — “Catalog” tab there is a new option that allows you to define the quality of product thumbnail images which are created automatically when you upload product images.
9. Improved stability and security, slightly increased performance, code optimization.
10. Many bug fixes and insignificant improvements:
    — bug fixes in product image uploading,
    — homepage category sorting issue,
    — proper display of special offer products on storefront homepage (products with long names will now be displayed properly; this feature requires your action to be enabled: go to “Design editor”, double-click you special offers block that is displayed not as expected and enter a right value for height of the product image+name block in pixels),
    — update of some payment modules according to the latest integration documentation changes (Paypal Payflow Link, HSBC, Paymentech),
    — and more.
11. PHP software users: in WebAsyst Installer settings you may now configure whether to display “Powered by WebAsyst” or not.

If you notice something weird about the functioning or the look of your store back-end, try updating your browser cache. To do this, right-click somewhere inside store back-end that works not as expected, and select “Open frame in new window” in the popup menu. Then press Ctrl+F5 (Windows) or Cmd+R (Mac) in the new window.

During this update we experienced a slow down in WebAsyst service operation caused by a batch upgrade of metadata (database structure) simultaneously for hundreds accounts of our hosted customers. This slow down continued from 3:30 am until 4:30 am EDT. We apologize for any inconveniences that could be caused by this case. This situation was unusual for us and it was a good experience which will help us improve WebAsyst software update system.

Download all buttons in one archive (321 KB; 103 images shown above plus color variations of some of them).

We sincerely wish that 2009 brings all the best to you and your business.
Happy New Year!

In the upcoming period from December 30th, 2008 till January 5th, 2009 technical support team will be working in a reduced staffing level. Complex issues which require thorough technical investigation will be processed on January 5th.

Today, December 17th, 2008, from 6:05 until 7:53 GMT, WebAsyst servers were unavailable due to technical problems at the data center where they are physically located (Montreal, Canada).

As a result www.webasyst.net and all user accounts on it were unaccessible.

Our network administrators did their best to restore servers functionality. Not everything was in their power, however. We required assistance and cooperation of the data center technicians. That is why downtime was so lengthy.

At 7:53 GMT WebAsyst servers came back online. None of the users information and data has been lost. At the moment everything is back to normal.

We greatly apologize to all of the WebAsyst users that have been affected by the service unavailability. Right now we are thoroughly investigating this case to take all possible measures and prevent such downtimes in the future.

Our annual holiday sale event is very special this year. We have two special offers:

1. Generous discount for the entire WebAsyst Suite.

The price of the entire WebAsyst Suite delivered as PHP software is now only $499 Regular price: $999 It’s only $200 more than the price for a single Shop-Script application, but instead of one application you get all nine: Shop-Script, Files, Projects, Issue Tracker, Contacts, Mail, Notes, Pages, Photos. Buy WebAsyst Suite now

2. If you have already purchased Shop-Script or other WebAsyst applications,

then we have discounts for you as well. On Dec 10th we emailed personal discount coupon codes to all our clients. Every discount coupon which grants a generous discount on all additional WebAsyst software purchases while this special offer is available. Check your email for the message with your personal discount code.