osCommerce

osCommerce 2.x is for older PHP and MySQL versions, while the 3.x branch if for more modern and latest PHP/MySQL versions.

Features:

• OOP coded
• Admin panel
• Easy to install
• Multilingual
• Templated layout for easy customization
• Products management
• Organize categories
• Manage manufacturers
• Manage product reviews
• Manage customers
• Manage orders
• Manage downloadable products
• Manage payment gateways
• Manage product specials
• Support for multiple shipping methods
• User profiles are protected via passwords
• Backup system
• Newsletters
• Invoices
• Store statistics
• Multicurrency support
• Update currency and exchange rates
• Manage store banners
• Address book functionality
• Orders history
• Orders status screen
• Multiple billing addresses
• Shopping cart functionality
• Easy checkout procedure
• Secure transactions with SSL
• Integrated search feeature
• Breadcrumb trails
• Dynamic product attributes
• Stock management
• Geolocation filters
• Real-time shipping quotes
• Taxing tools

What is new in this release:

• HTTPS administration tool
• Login with PayPal
• Orders can now be blocked when no defined shipping rate is available for the destination
• Session management improvements
• Payment Acceptance box introduced
• jQuery libraries updated

What is new in version 2.3.3.4:

• Don't pass a null parameter to the MySQL error functions otherwise PHP will display a warning message.
• Also manually convert existing data records to UTF-8 and detect encodings to prevent double encodings. Allow a dry-run to show which queries would be performed.
• As LC_ALL is now being used to set the locale, some languages other than English were using commas in float/decimal values which conflicted with MySQL. LC_NUMERIC is now set and forced to the system locale after the main language file has loaded.

What is new in version 2.3.3.3:

• Improve database query error logging.
• Dynamically load navigation boxes.
• Have forms posting from a HTTPS to HTTP page post to a HTTPS version to prevent the browser (Firefox) from alerting the user of being directed to an insecure page.
• Force decimal places value to an integer value.
• When expiring logged entries, don't pass the database connection link to tep_db_affected_rows().

What is new in version 2.3.3.2:

• PHP 5.5 Compatibility
• Administration Tool -> Dashboard -> Partner News
• Administrator Account Initialization
• tep_catalog_href_link()
• Administration Tool Navigation Menu
• Google+ +1 and Google+ Share Social Bookmark Modules
• Template Modules
• Canonical Header Tag Module

What is new in version 2.3.3.1:

• Parse REQUEST_URI with tep_db_prepare_input() before storing the value in the database. Replace REMOTE_ADDR with tep_get_ip_address().
• Fixed product price gross tax calculations when adding or editing products.
• Register a shutdown function to close and write the session data. Also check for and allow , (comma) and - (minus) characters in the session ID.
• When redirecting from HTTPS -> HTTP and replacing the url with a HTTPS version, also take DIR_WS_HTTPS_CATALOG into consideration which may differ from DIR_WS_HTTP_CATALOG.

What is new in version v2.3.3:

• Product Information - Prevent the session ID being added to product images.
• Payment Class - Remove legacy PHP 3 code.
• GZIP Compression - Automatically disable if PHP 5.4.0 to PHP 5.4.5 is used due to PHP bug #55544.
• Checkout Shipping - Improve checking of the shopping cart ID.
• Time Zone Compatibility - Improve PHP 5.2 Time Zone compatibility by setting the time zone to CFG_TIME_ZONE or to the default time zone if it is not defined.
• General - Typecast remaining variables used in SQL queries.
• Administration Tool -> Modules - Fix edit button link containing the module code.
• Administration Tool -> Tools -> Banner Manager - Properly delete banner image when the banner is being deleted.
• Social Bookmark Modules - Replace hardcoded 'images/' path with DIR_WS_IMAGES.
• New Robot NoIndex Header Tag Module - Adds a noindex meta tag to specified pages.
• New Google+ +1 Button and Google+ Share Social Bookmark Modules - Adds Google+ +1 and Google+ Share buttons to the product information page.
• New Canonical Header Tag Module - Adds canonical meta links to the product information and category listing pages.
• New Pinterest Social Bookmark Module - Adds Pinterest share button to the product information page.
• Libraries Update

What is new in version v2.3.2:

• Changed customer password forgotten feature to e-mail a personal link to the customer where they can change their password up to 24 hours, instead of directly changing the password to a random string and e-mailing it to the customer.
• Added new password_reset.php page to manage personal password reset links.
• Added new ar_password_reset.php Action Recorder module to log and limit the request of personal password reset links to once every 5 minutes
• Improve logic of tep_create_random_value() by using Phpass' random number generator.
• If function parameter $type is not 'mixed', 'chars', or 'digits', return a 'mixed' string instead of false.
• Add openssl_random_pseudo_bytes() and mcrypt_create_iv() to Phpass' get_random_bytes() class method. These are used if /dev/urandom is not available.
• Only seed the random number generator if PHP < 4.2 is used.

What is new in version v3.0.2:

• New Admin Applications
• Verify Session IDs - if requested Session ID does not exist, create and use a new Session ID.
• Only call for Administration Dashboard Shortcut Notifications when shortcuts exist.
• Support sub-domain URLs for Sites.
• ErrorHandler messages now formated in UTF-8.
• Allow configuration parameters to be retrieved by their key.
• New Administration Dashboard Customers module.
• Update jQuery to 1.6.1
• Update jQuery UI to 1.8.13
• Replace Admin ErrorLog delete page with a modal dialog.
• Update DataTable to support draggable rows.
• New public/upload directory where files and images can be manually copied to.
• New JavaScript File Uploader script to handle single and multiple file uploads.
• New Upload class supports PUT and POST file uploads.
• After a CoreUpdate update package has been applied, refresh the administrator's session access list to show new Applications.
• Allow CoreUpdate to run code after an update package has been applied (incl. SQL queries).
• Show CoreUpdate logs.
• Also seek new Applications and Languages in the Custom directory.
• Remove case-sensitivity when filtering extensions in DirectoryListing.
• Allow PDO_MySQL to connect to sockets.
• Lock the Setup Site after a new installation has been performed.

What is new in version v3.0.1:

• This is a maintenance release that focuses on bug fixes and improvements.

Requirements:

• PHP's PDO MySQL extension