Welcome to Zen Cart™ ...


The Zen Cart™ software is made available to you for use, additions, changes, modifications, etc. without charge, under the GNU General Public License.

While we do not charge for this software, donations are greatly appreciated each time you download a new version, to help cover the expenses of maintenance, upgrades, updates, the free support forum and the continued development of this software for your online e-commerce store.

Donations can be made at: The Zen Cart™ Team Page

We appreciate your support.
The Zen Cart™ Team

Zen Cart™ is derived from: Copyright 2003 osCommerce
This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY;
without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE
and is redistributable under the GNU General Public License


This software is OSI Certified Open Source Software.
OSI Certified is a certification mark of the Open Source Initiative.

CHANGELOG - List of Changed Files

For a list of files that have been changed since v1.3.9b, see the changelog-v1-3-9c.html

*** SECURITY REQUIREMENT ***

For added security, Zen Cart™ comes with several .htaccess files already included in various folders to help provide protection against unwanted visitors and even against mis-use of your site in the unfortunate situation of your site being hacked. These protections prevent hackers from using your site as phishing sources.

However, for these built-in protections to work, your web hosting server administrator MUST set the AllowOverride directive in the server's apache configuration (the server's master httpd.conf file) to "All" or at least ensure it includes these parameters: 'Limit Indexes'.

ie:    AllowOverride All

or:    AllowOverride Limit Indexes    

(NOTE: You must also add "Options" if uncommenting OPTIONS directives in your .htaccess files)

Without these settings, you will likely encounter "500 Internal Server Error" messages when attempting to access various parts of your site, including perhaps the zc_install installer script.

Storeowners hosting on Windows Servers using IIS instead of Apache may need to remove the .htaccess files and rework them into suitable equivalents within your IIS configuration. See Microsoft's IIS website for specific assistance.

ADDITIONAL NOTE ABOUT .htaccess FILES

Inside some folders is an .htaccess file that lists certain *permitted* filetypes which may be accessed. (Anything else is blocked to prevent abuse on your site).

The side-effect of this is that if you choose to use media types that are not already listed in the *permitted* list, then your visitors will not be able to see those resources.

Thus, if you are using product images that are not in the list of permitted types in your /images/.htaccess, you will need to add those types to the list.

Similarly, if you are using certain media types in music product previews, you will need to make sure those are in your /media/.htaccess

And, if you are using filetypes for downloadable products that are not already listed in your /pub/.htaccess and /download/.htaccess you will need to add those as well.

Zen Cart™ Minimum Requirements

PHP 4.3.2 or higher, Apache 1.3.30 and MySQL 3.23.x or higher.

Upgrade Instructions from v1.3.9b to 1.3.9c

If you are upgrading from Zen Cart v1.3.9a or 1.3.9b to 1.3.9c, the process is simple:
- compare all the changed files with the files on your own site... and re-apply your customizations to the new files
- upload the new files (with your customizations added) to your site
- (there are no database-updates required between v1.3.9a to v1.3.9b or v1.3.9c)

If you are upgrading from a version prior to v1.3.9a, please follow the instructions in the "how to upgrade" documentation in the /docs folder.

Whats New ...

The following improvements and bugfixes are included in v1.3.9c since v1.3.9b:

  • BUGSFORUM-1225 - 154055: Missing quotes in coupon_restrict.php language file
  • BUGSFORUM-1227 - 154064: javascript validation of edit account form
  • BUGSFORUM-1231 - 154121: Unknown modifier 'h' in layout_controller.php
  • BUGSFORUM-1233 - zenid added at the end of the canonical element if first click is a linked product
  • BUGSFORUM-1235 - session functionality problem on Windoze
  • BUGSFORUM-1256 - fix broken download problems from v1.3.9a and v1.3.9b
  • BUGSFORUM-1257 - fix download errors from v1.3.9a and v1.3.9b
  • BUGSFORUM-1261 - Problem with automatic created account welcome e-mail - when using PayPal Express Checkout
  • Attributes-Controller: prevent division-by-zero errors if storeowner has mistakenly set the attribs-per-page value to zero
  • Fix minor array_merge error which was appearing in PHP logs during PayPal Express Checkout transactions for international addresses
  • Some debug code had been left in some payment modules, causing debug-logging to occur even when logging was disabled
  • Allow cookie domain and path to be overridden by user defines.
  • product_info pages could trigger browser security warnings under some isolated circumstances; thus, templates are updated
  • Fix intermittent problem with multiple IP addresses being submitted to Cardinal for 3d-secure processing
  • Some Solo cards were being identified as Maestro, thus causing some 3d-secure problems
  • Fix broken HTML-formatted email messages in "welcome" email sent when first-time customers use Express Checkout
  • BUGSFORUM-1263 - FCKeditor shows raw HTML markup in product descriptions with v1.3.9b
  • Fix minor issue with missing category display when navigating in downloads_manager


Zen Cart™ Copyright 2003-2010