ClicShopping

The online Payment Services Directive (PSD2 - DSP2), which came into force in January 2018 and whose measures will be applied from September 14, 2019, aims to secure and facilitate the use of online payment. Like the RGPD, this directive harmonises regulation at EU level, this time at the level of payments, and is part of the drive to create a digital single market. By updating the previous directive applied in 2007, the DSP2 incorporates new issues specific to open banking and payment service providers (PSP). This new directive is the result of long debates between the European Commission, the European Parliament, the European Banking Authority, banks and FinTech actors. Why is DSP2 necessary? The DSP2 is first and foremost a response to the challenges of cybercrime. With a fraud rate of 0.161% in 2017, France is a good student according to the Observatory on the security of the means of payment of the Banque de France. However, the DSP2 sets an even more ambitious target at 0.13%. The main measures of the DSP2 are: Securing online payments, through the implementation of double-authentication for transactions of an amount greater than € 30 among three factors (a code or a password that we know, a device that one possesses or a biometric data). The choice to opt for a 3D-Secure (3DS) type of device no longer belongs to the e-merchant but to the bank, with the obligation to generalize it and to strengthen it. Secure access to data: The DSP2 requires banks to provide access to their customers' data (with their agreement of course) to third parties such as payment service initiators (so-called PSPs in English, such as SoFort, Ayden, HiPay or Paypal) or account information service providers. The obligation for banks to offer them adapted interfaces or APIs to enable them to aggregate certain banking data. Securing online payments: The obligation of strong authentication for online payments of more than 30 euros, to reduce fraud in e-commerce. Securing online payments, through the implementation of double-authentication for transactions of an amount greater than € 30 among three factors (a code or a password that we know, a device that one possesses or a biometric data). The choice to opt for a 3D-Secure (3DS) type of device no longer belongs to the e-merchant but to the bank, with the obligation to generalize it and to strengthen it. Strengthening consumers Strengthening consumers' rights to banks by prohibiting extra billing in the case of payment with a credit or debit card, online or in store The strengthening of consumer rights, through the lowering of the franchise remaining the responsibility of the customer in the event of fraudulent card payment before opposition of 150 to 50 euros, shorter repayment times and the introduction of a right to unconditional reimbursement for direct debits in euros. Consumers economy: The prohibition of overbilling, the application of surcharges in case of payment by debit or credit card. Repercussions of DSP2 are multiple: For e-commerce players, there is a fear of a deterioration in conversion, particularly because of double-authentication that may complicate the online shopping journey and see many transactions fail. To minimize the impact of the DSP2 on the conversion rate of e-commerce sites, the directive provides exceptions for which enhanced authentication is desired but not mandatory: repeated transactions, small transactions and transactions intended to trusted beneficiaries. In the latter case, the user sends a whitelist to his bank. For players in the banking sector, we can expect an opening to competition in the market, especially thanks to the fact that the DSP2 provides an approval that certifies payment service providers and other FinTech actors on the quality of their treatments. Coupled with easy access to the data of their users, this approval strengthens their legitimacy vis-à-vis traditional banks and allows them to develop even more innovative services. Opening the market to new players by giving access to account information via a secure communication channel. DSP2, therefore, implies new constraints and new opportunities. By further securing transactions and strengthening cooperation between banks and payment providers, the DSP2 should nurture a virtuous circle for European citizens. On the one hand, the latter will benefit from authentication devices designed to limit fraud. On the other hand, by opening access to certain data, the FinTech players will be able to improve their value proposition.

@Drack, Thank you for this great help This fix will be included for 3.2107 version

If you hoster use MyISAM for their SGBD You can not install ClicShopping because it Use Innodb If you see a message like this when you try to install ClicShopping : SQLSTATE[42000]: Syntax error or access violation: 1286 Unknown storage engine 'innodb' You can try to resolve the problem with this process : 1 - Install manually the Database called : clicshopping_en_MyIsam.sql located inside install directory via your phpMyAdmin import Db (no data included inside) 3 - Continue the installation process without to install the Db.

Failure of delivery or non-compliant order on the Internet ... what is the right attitude to obtain satisfaction? The very recent creation of a mediation body for Internet litigation strengthens the will already set by the Community Directive of 8 June 2000 on electronic commerce, to privilege out-of-court solutions, since the damage is not too important . The user has at his disposal a hierarchy of remedies to assert his rights as consumers. In practice, everything depends on the location of the site on which the user is shopping. French sites If the dispute concerns a delay in delivery, most sites now allow to check directly online the status of the order. The buyer has an interest in doing this before contacting the seller. Customer service According to the law on confidence in the digital economy of 21 June 2004, merchants must indicate in the offer of sale the details of customer service. An e-mail contact followed by a telephone conversation can sometimes resolve the dispute amicably, especially if the company is concerned about its brand image. Registered letter: In the absence of agreement, it is prudent to send the seller a registered letter with acknowledgment of receipt reminding him of the facts at the origin of the dispute and the requested arrangement. In practice, this is the best way to formally notify the seller of his claim through a specific complaint form developed by the European Commission. Your claim must include: all of your details (name, surname, address, telephone number ...); the reference of the product or service causing the problem (product code, packaging code or barcode, reference of the contract or order form ...); if possible, the date and place of the purchase or performance of the service (canvassing at home, distance selling ...); the problem occurred, by clearly expressing its nature (eg failure to deliver after expiry of the delivery period); the subject of your request (cancellation or performance of the contract, refund, exchange, repair ... try to encrypt your request); if possible, the legal bases of your complaint (code articles, texts ...); vouchers in photocopies (invoice, receipt, estimate ...). Organizations and Associations Professional organizations, such as FEVAD (Federation of Distance Selling Companies) are responsible for settling disputes between their members and buyers. The list of its members can be found on its website (www.fevad.com). Consumer associations are now effectively intervening in e-commerce disputes or settling a dispute with a mobile operator or service provider (European Consumer Center). European Consumer Centers (ECC) Information centers located near cross-border areas, such as the one located in Kehl (Germany, where the Franco-German association EUROPEAN CONSUMPTION CENTER hosts CEC France and CEC Germany in the same premises, which work in this way. close cooperation), inform European consumers and their internet users of their rights and help them find an extra-judicial solution to their cross-border disputes. For German Internet users, there is even a service in Kehl entirely devoted to the problems related to electronic commerce, to settle a dispute against a site installed in another European country. The website of the German Contact Point for Electronic Commerce can be found at: http://www.ecommerce-verbindungsstelle.de/ European Consumer Center France Indigo number 0 820 200 999 (0,09 EUR / min) By phone: (0049) 7851.991.48.0 By fax: (0049) 7851.991.48.11 By mail: info@cec-zev.eu.eu By mail: Bahnhofsplatz 3, 77694 Kehl - GERMANY Website: http://www.europe-consommateurs.eu Outside Europe Even if the user can claim the application of its national law, the recourse against the foreign sites turns out to be complex and random. Judicial Remedies In France The Internet user who has suffered significant damage can bring against the professional a civil action for liability, for example in case of non-delivery of expensive computer equipment whose price had been paid in full. The seller is considered as the only interlocutor responsible for the good performance of the contract since the law on confidence in the digital economy. In Europe The Rome Convention of 19 June 1980 (Article 5) specifies that, in the absence of a choice between the parties, the usual law of the buyer applies if the conclusion of the contract was preceded in that country by an offer of product or services or if the consumer has performed the act

Hello, Happy to present you the ne release 3.21. All information is available there : https://www.clicshopping.org/forum/topic/398-version-321-release/ I hope you will be happy and the work continue !!! Have a good day

Llltle released are out. Just little bug discover and adjustment because the end of this month about the fix released.

Hello Everybody, Follow the announcement, we will happy to present you the pre release 3.20. if you comment do not hesitate. During this month we will update the apps and look your comments. Enjoy

Thank you for all your work @Maxime. I am sure the members will appreciate all what you have done.

Hello @Patrick, Are you actualised you group, I think this approach can resolve your problem.

@Patrick, Yes and no, some elements have been updated but with jquery fix, it was better to make an update.

Like you can see, the 3.12 is out. Some files have been updated or improved. the 3.12 has been out because they have a security fix on jquery. We have updated also some script. To update ClicShopping : If you have modified the template default directory, it's better to use a beyond compare If you use another template directory, you nothing to do except to compare you have modified files to see if there is an update or not. Have a good day

@Drack, yes it's correct

An example : $CLICSHOPPING_ProductsLength->convert($products_dimension_depth, $products_length_class_id, 2) In this case, all the products_dimension_depth will be converted in cm. You can also use the default unit (can be defined in configuration store)

Hello @Patrick, The product length has been introduced because some shipping module takes the length (ups, postcanada, boxtal, fedex ..) You can define different length in function your need. When you create a new shipping app, you can convert the length in function of characteristics of the service. For example, in France, we use the cm but in USA, this is the inch. If you have your length in cm, you can convert automatically in inch . Some others updates resolve bug fix.

@Laela Welcome, ClicShopping is not made to be used under Windows, I have not the time to make all verification inside the environment. I think your computer is too slow to execute the process. You can update the execution time and increase the number. Go to php.ini, edit and search this line : ;;;;;;;;;;;;;;;;;;; ; Resource Limits ; ;;;;;;;;;;;;;;;;;;; ; Maximum execution time of each script, in seconds ; http://php.net/max-execution-time ; Note: This directive is hardcoded to 0 for the CLI SAPI max_execution_time = 30 for example, change by this max_execution_time = 3000

I looked more deeply on this problem: escapeshellcmd(). If your hoster lock the default Sendmail function, you must use the SMTP inside configuration / Mail I will make other test and make an update about as soon as possible. But you can use the application without problem. Just in case in your hoster block this function, use the other. That's why you hoster create protection on that. https://exploitbox.io/paper/Pwning-PHP-Mail-Function-For-Fun-And-RCE.html