X-Cart

X‑Cart is the CMS solution for e-commerce on the basis of the PHP language.

Properties

Adaptive design. The modern design optimized for display on all types of devices including - mobile: on smartphones, tablets, large-format monitors.

The expansibility and simplicity of updates - modular architecture allows to install the extensions of functionality with ease and to modify any element of design under needs of the customer, saving at the same time simplicity and convenience of upgrade in couple of clicks.

Marketing tools and SEO - coupons and discounts, banners, reminders on incomplete orders, best-sellers and recommendations. Google-analytics for monitoring, cheloveko-clear URL, XML a site map, metadata.

Integration with popular services is EMS Russian Post, UPS, Yandex. Money, Robokassa, Webmoney, Qiwi, PayPal and about 80 other payment systems allowing to accept MasterCard credit cards and Visa

High-speed performance and security - compliance to international standards of security when processing the credit cards PCI DSS, instant cloud search, CDN.

1C - Goods and Services. Unloading of categories, products (including images and attributes) and their options. Unloading of orders from online store in 1C and back.

The functionality Multivendor - uniform marketplace is available to several sellers independent from each other under the leadership of the uniform administrator.

Screenshot of the page of the website, (2014)

Characteristics

• Open source code
• Programming paradigm: OOP
• Server programming language: PHP 5.3.x above
• Javascript-frameworks and libraries: jqueru 1.11 + jQuery UI 1.10 + underscore.js
• Front-end freymfork: Bootstrap 3.1 with support of LESS
• Server architecture: MVC (thin controllers / thick widgets); the flexible modular architecture is provided due to reorganization of a tree of classes and implementation in it the decorating classes of modules
• Client-side architecture: similarity of MVVM, but widgets from the server obtain not data, but ready HTML. Communication between widgets - through events on a uniform mediator. Widgets are very poorly connected among themselves
• ORM library: Doctrine 2.2 with fixtures in the YAML format
• Database: MySQL, PostgreSQL
• Cache of data, cache of widgets, several drivers of a cache - from the file system to Memcache
• the system of expansion of templates based on the referred to as spisok of templates; patches of templates
• the system of the forcing-out skins
• Integration with Drupal 7.x
• REST API - for interaction with databases without direct access to the code on the server
• WebmasterKit is the module for simplification of development and debugging of other modules: output of hierarchy of templates, runtime of SQL of requests, memory consumption and so forth.

2016: X-Cart прошла audit

On August 10, 2016 the Informzashita company announced certification of X-Cart Payments Version application 3.0.x. on compliance to requirements of the international standard of security of the industry of the PA-DSS payment cards of version 3.1.

Certification is carried out by the company auditor Informzashita. During the project functions of the application, including payment authorization on bank cards, processes of safe software development, the procedure of information security support are checked. Acceptance by Council of PCI SSC of results of certification audit and inclusion X-Cart Payments in the published PCI SSC list of the certified applications became a project deliverable.

For August 10, 2016 the X-Cart Payments payment system is confirmed with the certificate of conformity and ensures safety of transactions to the users.

We cooperate with Informzashita since 2010, from the very first version X-Cart Payments which was certified then under PA-DSS 1.0. Beginning the new project (PA-DSS 3.1) which assumed certification of the new software product from scratch, we studied the market of similar services and arranged some kind of tender. This time we selected Informzashita again: first, we accepted price relation and qualities of service, and secondly, we were already sure of professionalism of her employees by the previous work experience. Alexander Mulin, X-Cart Payments project manager

The Informzashita company has seven years' experience of carrying out audit on compliance to the PA-DSS standard during which the company certifies more than 10 applications. Our experience shows that development processes and supports of most the Russian companies do not meet safety requirements and need adjustment that is the most difficult task on the way of achievement of compliance to the PA-DSS standard. Within certification of applications we try to minimize change of the developed processes, making use of the accumulated experience on creation of information security tools and also on inclusion of questions of information security in development processes and supports of software products. Evgeny Afonin, director of the department of consulting and audit of Informzashita company