Archive for March, 2013

FTP Enable/Disable

March 28, 2013

Per our previous blog post regarding the important FTP changes, if your FTP password does not meet the password strength requirements your FTP access been disabled.  If your FTP account was disabled it can be re-enabled by updating your FTP password from My Account–>Change FTP Password and then enabling FTP from General–>FTP.

If you do NOT use FTP we recommend keeping it disabled.

Advertisements

New Blog Features Available – Blog meta content, comments, moderation and subscription

March 26, 2013

1) Blog Meta Fields

Functionality is now available to define meta tags for blog entries, ie meta title, meta keywords and meta description.

If the meta title is left blank the blog title will be used instead.

If the meta keywords are left blank the keywords for the main blog page will be used instead.

If the meta description is left blank the first 150 characters of the blog post will be used.

To define the meta tags for a blog post please visit Design–>Blog–>View/Edit and click on edit for the blog post to make changes to.  The meta fields are shown at the bottom of the blog edit/add page.

2) Blog Comments

Functionality is now available to enable comments on blog entry.  If comments are enabled then shoppers can comment on blog posts.  To turn on blog comments please visit General–>Other Settings.  If the blog is enabled you should see a box labelled Allow Blog Comments, check the box to turn on comments in your blog.

3) Blog Moderation

Functionality is now available to enable moderation on blog comments.  If moderation is enabled then all comments will be first sent to the site admin for approval before being displayed.  To turn on blog moderation please visit General–>Other Settings.  If the blog and comments are enabled you should see a box labelled Enable Blog Moderation, check the box to turn on moderation for new blog comments.

4) Blog Subscriptions

Functionality is now available to have users subscribe to blog posts and/or blog comments.  A user subscribing to the blog will be alerted of all new posts that are added to the blog.  A user subscribing to a post will be alerted when new comments are posted to the blog.  To customize the emails that are sent for blog subscriptions and/or to turn on admin notifications for new comments please visit General–>Email Notifications and scroll to the bottom where the Blog Comment Notification and Blog Post Notification emails are available.

Protected Department Feature Upgrade

March 20, 2013

Please note the protected department feature upgrade/change shown below.

Items which are in protected departments will no longer be displayed on the home/search pages if the shopper who is logged in does not have access to the associated protected department.  If the shopper is not logged in then all items will be shown as before.  When the shopper clicks on the item they would be asked to log in if it is in a protected department.

This change affects only items in protected departments and shoppers who are logged in.  Shoppers who are not logged and items in regular departments are unchanged.

FTP SSH Available

March 19, 2013

The SFTP/SSH method of securely connecting to FTP described in our previous blog post is now available for use.  If you prefer to use this method of connction instead of FTPS you may connect using port 22.  The SFTP/SSH method of uploading files is generally slower then FTPS and should be used only if you cannot use FTPS on port 990.

Please remember that we will be turning off support for regular FTP on port 21 effective this coming Monday March 25th.

 

FTP SSH Option

March 11, 2013

The following blog post applies to users who are receiving a Connection Timeout and/or Connection Refused message when trying to connect to FTP using implicit TLS security via port 990.

The error messages above indicate that your connection is being blocked by a router or computer firewall.  Please note that in order to connect you should ensure that your computer firewall is setup with an exception for your ftp software and/or that you have enabled access to ports 990 and 50000 – 51000.  In addition, many computer setups involve a router or modem which also has a firewall installed and which could also be blocking the required communication.  Please ensure that the above ports are also open on  your router/modem for communication.  Port 990 is FTP and ports 50000 – 51000 are for Passive FTP communication, all must be open.  Port 21 is usually open by default which is why this connection is working even if you cannot get the other to.

We have received many queries from users who are not sure how to open ports on their firewall etc.  To try and make the switch as painless as possible we are working on also adding another connection option called SSH.  SSH is another secure way to connect and transfer files, although it is slower, it has the advantage in that it usually does NOT require the opening of additional ports because it uses port 22 which is usually already opened by default on most computers and routers/modems.  If you are not able to open ports, are unsure how to do it etc, the SSH connection option should be easier to get started with and we recommend waiting for it.  It is not yet available but we are working on adding it and a notice will be posted when it is available, within the next week.

Please direct any questions regarding these changes to our support staff via support request.

FTP Username change implemented

March 7, 2013

Per our previous blog post, the following FTP change is now implemented…

FTP Username Change

All FTP logins are now modified to use store ids instead of the old user name.

The remaining FTP changes announced at the previous blog post will be required starting March 25th.  We recommend upgrading your FTP setup as soon as possible along with the login change and not waiting until March 25th.

The March 25th changes will include:

FTP Password Strength

If your FTP Password does not meet the new strength requirements a notice will be shown in yellow at the top of your admin screen at login.  Click on that notice to update your FTP Password.  Note that FTP accounts with passwords that are not strong enough will be disabled on March 25th until the password meets the strength requirements.

Secure FTP Login Required

To switch from regular FTP to FTPS, update the port on your FTP software from 21 to 990 and for the encryption type choose require implicit FTP over TLS.   Port 21 will be closed on March 25th.  If you cannot connect using port 990 and have a firewall on your router or computer you may need to open up ports 990 and 50000 – 51000 to allow the secure connection to succeed.  Alternatively you can also use SFTP over port 22 if you are having trouble with FTPS.  SFTP is slower then FTPS but some ftp clients support it when they do not support FTPS.

Important FTP Server Changes

March 6, 2013

Please note the following important changes coming for the StoreSecured FTP Server.

FTP Username change – effective March 8th

FTP usernames for all stores will be changed to use the store id for the username.  FTP Passwords will remain the unchanged (please see the note below about password strength).

Only secure connections allowed – effective March 25th

All users will be required to connect to the FTP server using a FTP client that supports FTPS or SFTP connections, ie port 990 or port 22.

FTP Password strength requirements enforced – effective March 25th

All FTP Passwords must meet password strength requirements or your FTP account will be temporarily disabled until it does meet the requirements.   Passwords which are to easy to guess are a possible security hazard.  FTP Passwords must contain at least one of each of the following: upper and lowercase characters, numbers, a symbol and be at least 7 characters long.   If your password does not meet the strength requirements you should see a message in yellow at the top of your screen when editing  your store.

Frequently asked Questions

What is FTP?

FTP stands for file transfer protocol.  FTP is used to easily transfer large amounts of data, ie html files, images etc, from your local computer to the store server.  If you do not know what FTP is you probably do not use it and can disregard this message.  Most of our merchants do NOT use FTP, it is an advanced functionality.

Why are these changes required?

These changes are part of an upgrade to our FTP server to comply with new PCI rules and regulations.

When will the future changes occur?

March 25th