Security issues...

[robb3369]

1. Can you encrypt the database and ftp passwords instead of storing them in clear text in the x.xml file? (Example code for .net)
2. Are there plans to include a method of accessing the database via an SSH tunnel?
   I've setup my trial to use plink.exe (part of Putty) to access the DB server:
   "C:\Program Files\PuTTY\plink.exe" -L 3306:localhost:3306 mySQL.server-running-ssh.com
3. Is it possible to use HTTP for image viewing, rather than FTP? (Use image base such as "http://www.store.com/store/images/")

But looking good so far...

[aaron_s]

Yes, most of these issues are being looked into. The encryption of the database information has already been scheduled for the next release (xShop v1.1). We have not yet scheduled a release for SSH tunneling, but it is something that we are seriously looking to implement. We have not yet looked into the possiblity of using HTTP for image viewing.

We will try to add new features to the earliest possible release. We will also try to add the requested features based on popularity/need of the new features.

Thanks for your comments.

-Aaron