We’ve just released a bunch of new features, and this is the first of a series of blog entries to let you know about the changes.

As you’re probably aware, email marketing is an important part of  running an ecommerce site. At Spiffy Stores we’re always on the lookout to find new and better ways to help you run and promote your online store.

The first of these changes is a feature to help you create an email marketing mailing list. To recognize the importance of Email marketing, we’ve added a whole new section under “Marketing” in your store toolbox for the subject.

read on »

We recently enabled a small security enhancement to the Spiffy Stores software to prevent a security attack called Cross Site Request Forgery (CSRF).

Basically, now an encrypted token is generated and inserted into every form on the store web pages. This prevents a hacker from copying a form from the site and tricking you into executing the form from a fake site, thus giving the hacker access to your account.

Whilst it was extremely unlikely that this sort of attack would work because of the way in which the Spiffy Stores software is designed, it never hurts to improve security wherever possible.

However, it turns out to have an unintended bonus effect!

Spiffy Stores is one of the few ecommerce solutions that has a “Contact Us” form built into your store. This form is generated for you automatically and you don’t need to use a third-party online form service to get something as essential as a contact form.

Now that we have added the Cross Site Request Forgery code, we are seeing instances of spammers who have “copied” the contact forms from various sites and have built them into scripts to try to spam our store owners with fake contact form submissions. All of these attempts are now failing because they are all detected as forgeries, and this means that your inbox will contain less of the spam generated by these pests.

Every time a customer places an order, they are sent an Order Confirmation email showing them what they’ve ordered.

From time to time, email messages get lost or misplaced. Now you can resend a lost Order Notification to the customer from the Order page. Just go to the order and you’ll find a new link called “Email Order Notification”.

Just click on the link to resend the lost Order Notification.