serialdeviant

Hello,

I’ve actually managed to do this for someone – set up WP as an online shop (it’s not my site and we’re still testing and refining the look but it works, so I’m not comfortable sharing the URL yet).

Basically, I use Pages for an about section, shipping/sizes, Contact. I have index.php (which contains news and latest products ‘blocks’), single.php, category.php (which also contains all product ‘blocks’), and in the case where there are child categories, the parent category is defined as category-X.php.

It’s not very plug and play, though, one would need to know and be willing to do a little fiddling. But I think it works well.

It involves the Paypal Quicktag modification
http://www.webmaster404.com/wordpress-paypal-integration/

The Custom Query String plugin

Using 2 Loops

And optionally, WP-Contact Form and Spam Karma.

I think, because WP is not a specialist shopping cart script, a solution won’t be plug and play, especially if one is not a programmer (like me, I know nothing about PHP).

I have run the disable inline uploading plugin and not uploaded the inline-uploading.php file. The account was wiped and I started from scratch (after restoring the database, of course). So it’s not been hacked yet. But we’ll see.

I have checked out your plugin, and plan to use it (way ahead of you there, hehe), along with deleting the inline-uploading.php file altogether (after the account has been reset, as it were).

Most unfortunately, I’m not technical enough to work out if that is the real problem – I’m just trying to cover all the bases.

I have a similar question.

Oh, and line 220 on edit-form-advanced is <input name="publish" type="submit" id="publish" tabindex="5" accesskey="p" value="<?php _e('Publish') ?>" /> and line 184 in edit-page-form is blank. I’m not sure these are the right lines to comment out.

Should it be

<?php
if (current_user_can('upload_files')) {
$uploading_iframe_ID = (0 == $post_ID ? $temp_ID : $post_ID);
$uploading_iframe_src = wp_nonce_url("inline-uploading.php?action=view&amp;post=$uploading_iframe_ID", 'inlineuploading');
$uploading_iframe_src = apply_filters('uploading_iframe_src', $uploading_iframe_src);
if ( false != $uploading_iframe_src )
echo '<iframe id="uploading" border="0" src="' . $uploading_iframe_src . '">' . __('This feature requires iframe support.') . '</iframe>';
}
?>

(Lines 236-246 and 198-208 respectively).

I’m not a PHP coder, so if someone could take pity on me and actually explain if I need to comment out ALL the lines (as in, insert // at the start of each line) or just the first one, then if I can delete the inline-uploading PHP file from the server?

My web host has told me that it can be a break in point for hackers and I was hacked 4 times in 2 days.

Andrea