The following is PDG Software's response to the news report last Spring, and a subsequent article published here, about the security vulnerability of improperly configured shopping cart software.
Recently, PDG Software, Inc. has been associated with speculations on the security of Web stores running shopping cart software. The research and development team at PDG Software has taken the necessary steps to determine the nature of this problem, and to correct it.
The speculation revealed a security "hole" on several online stores, rendering sensitive information vulnerable to fraud. PDG Software isolated the problem and offered assistance to server administrators to close the potential hole.
It is important to understand that the problem stems not from the shopping cart software itself, but rather from improper installation of the software. Several Web hosting companies and/or Web designers have improperly set "server level" permissions during the installation. This oversight can contribute to the potential exposure of sensitive information collected by PDG Shopping Cart.
Because Internet commerce is our business, we take issues like this very seriously. We have already notified our major Web hosting partners and they have taken the necessary steps to rectify the problem. However, we can appreciate your need for "peace of mind" and will gladly conduct a test of your site to determine whether or not it is exposed to this security risk. Should we detect any security risks on your site, we will work quickly with you and your hosting company to correct the problem. Please contact our Technical Support team to have this test conducted.
If you have any questions, you may call us at 770-270-0062 or visit our Web site at www.pdgsoft.com. For more information regarding the security issue, visit www.pdgsoft.com/Security/security.html.
PDG Software, Inc.
1751 Montreal Circle
Suite B
Tucker, Georgia 30084
(770) 270-0062
www.pdgsoft.com
IE 7
Firefox 2.0
