slscart logo

After Installation

Here are some tasks to perform after installation of slscart. Most are optional.

1. The following tasks are done in the Mals account:

  1. Set up Mals shopping cart

2. The following tasks are done in the store admin:

  1. Set store timezone
  2. Set store font
  3. Set store email address
  4. Set store email name
  5. Set home page and catalog product display

3. Additional

  1. Create a store privacy, refund, and terms of service page

4. The following tasks require editing files on the server:

  1. Create a custom error page for your store
  2. Add store website defaults
  3. Use recaptcha instead of captcha for better spam control
  4. Instant inventory control
  5. Config file
    1. Create link to email program
    2. Cookie encryption
    3. Secure the store
    4. Secure store admin
    5. Secure Mals
    6. Handling invalid parameters
    7. SMTP (sending email)

5. Advanced modifications

  1. Cookie encryption

1.1 Set up Mals shopping cart

The slscart system works with the Mals-E shopping cart. Set up a free Mals account. Once your Mals cart is activated and configured, you will need to make the following changes for inventory control to work properly.

Note that a secure site needs to have its own valid SSL certificate.

  1. Mals: Create a Mals-E cart account and set the following:

    • Cart Setup -> Advanced Settings -> Remote Call

      The HTTP call must be set up in Mals for the inventory control and order tracking to work.

      • URL: In the URL field, add website/go/finish.php (note: no http://). You can also use the direct IP address to the finish page (e.g. 123.456.789.012/~client/go/finish.php)
      • Method: Select HTTPS POST if you are using https or HTTP POST if you are using http for the method.
      • Debug: Do not check the debug checkbox; this is only used if you are having problems with inventory control and order tracking, and want to receive debug notices.
    • Cart Setup -> Customize -> Return Link

      Optional! A return page updates the store inventory immediately after the order is placed, if the customer clicks the 'continue' button.

      • Your website address: In this field, add website/go/return.php (note: no http://). You can also use the direct IP address to the site (e.g. 123.456.789.012/~client/go/return.php)
      • Select https for a secure site, http for non secure site.
      • Select 'Form button with the word CONTINUE. POST request.'
         - OR -
        Select 'Form button using the text above. POST request.' and enter some text in the 'Text for the link' box.
    • Cart Setup -> Customize -> Continue shopping button

      Appending the cart content allows the continue shopping button in the cart to go back to the item you were originally viewing.

      • Select 'Hyperlink'
      • Check the box marked "Append cart content vars".
    • Cart Setup -> Email Settings -> Order Notifications

      We recommend using a domain email or gMail email address for order notifications. Mailings may not work seamlessly with free emails like AOL or Yahoo email

    • Cart Setup -> Messages and General Settings

      If a secure store is being used, check "Use secure pages for name and adress".
      Click 'Submit Changes' button at bottom

      If you want a thumbnail to show up upon checkout, fill in the URL to the store. If you have a secure store, use https.
      For example:

      Fill in the thumbnail size you want, like 150 height, 150 width. The units are pixels.

    • Cart Setup -> Payment Methods

      Select the payment processor or method you will use to take payments from customers. Make sure you use a processor that works with 'Remote call' in the payment processor list.

    • Cart Setup -> Payment Methods -> PayPal

      If you are using PayPal as a payment processor, enter the PayPal email and then:

      • Under 'Return link from PayPal', select the second option: 'return the customer back to the cart. See the notes below...'.
      • Select the 'IPN - Instant Payment Notification' checkbox. (If you do not, a customer can close the window and it won't post back.)
  2. PayPal: Please note that if you want to use PayPal as a payment type, you must use a business account if you want to automate inventory control or log orders and sales. Personal accounts can be used with the cart, but the inventory control and order tracking will not work!

    • My Account -> Profile -> Website Payment Preferences -> Auto Return

      If you are using PayPal as a payment type, you must turn the 'Auto Return' setting On. This automates the return back to Mals after a customer pays via PayPal. (If this setting is turned off, the cart will require the customer to push a button to go back to the cart, and not all customers will do this.)

    • My Account -> Profile -> Website Payment Preferences -> Return URL

      The Auto Return setting requires a thank you page to return to after the payment is made. Mals creates a page automatically and submits it without any effort on your part. However, if you plan to use PayPal for any other reason, you will need to make a thank you page on your site. Create the page, following PayPal's thank you page rules (shown on the auto return setting page) and enter the URL in the space provided in PayPal.
      Note: If you have a DNS glitch, try using the IP address here.

      e.g.) 123.456.789.012/~client/pages/thankyou.php

      instead of:

  3. slscart: Add your Mals cart details and create a thank you page.

    • Storeadmin -> Catalog Setup -> Mals-E Cart ID

      Make sure this is set to be your Mals-E user name. It's important there are NO spaces before or after the cart ID!

    • Storeadmin -> Catalog Setup -> Mals-E Server

      Make sure this is set to be your Mals-E server. It should only be the www part (e.g.  ww8 or ww12)

    • Storeadmin -> Pages -> Add Page

      You only have to add a thank you page if you are using PayPal as a payment processory.

      Create a web site page called "thankyou.php".

      On this page, type out the following text:
      Thank you for your payment. Your transaction has been completed, and a receipt for your
      purchase has been emailed to you. You may log into your account at
      to view details of this transaction.
      Save this page to your web site.

Important! slscart's inventory control system decreases stock counts automatically, and will discourage a customer from ordering more than is available. While we have implemented checks to decrease over ordering, we cannot guarantee that a customer will not try to change the quantity within Mals or otherwise try to order more than is available.

2 Storeadmin Updates

These are set in storeadmin.

2.1 Set the store's time zone

This is located in storeadmin > Administration.

Common time zones are America/Los_Angeles (PST), America/Denver (MST), America/Chicago (CST), America/New_York (EST).

2.2 Set your store's font

Under storeadmin > Administration > Fonts & Colors

The font selection starting with --apple is good for all devices (desktop and mobile) and loads fast. Learn more about native fonts. If you want to focus on mobile devices and readability, Open Sans and Droid Sans are good choices.

Additional fonts can also be added to slscart.

All available fonts, including additional fonts, can be seen by clicking on Administration > Show Fonts

2.3 Set your store's administration email address

The admin email is used in contact us, wholesale. It is best to use an email that is in the domain of your store. For example, sales @ for a store using the domain

2.4 Set your store's email address name

This is the 'from' email name. The default is 'Admin'. Some suggestions are your store's name or store's name - Admin.

2.5 Set catalog page and home page product display

In storeadmin > Web Site > Pages > Home edit or Catalog edit then choose Show Products: selection

On the home page and catalog page, you can show product categories, a few products, or no products. These will display just under the page content. You may display new products (items entered most recently, according to the Date Entered: field on the first page of a product being edited), featured products (if you have some selected) or sale products (items with a sale price). You may also display a list of categories in a single column, in three columns or five columns. If you do not wish to display either products or category lists, select "No Display".

3 Server Tasks

The following tasks require editing or copying files on the server.

3.1 Create a custom error page

Click on add custom error page for further instructions on creating a custom error page.

3.2 Set up recaptcha

recaptcha is much more user-friendly and effective than the standard captcha that comes with slscart.

Get recaptcha keys

Set recaptcha keys in config file. slscart will recognize this and start using recaptcha.

Read recaptcha notes for a further explanation.

Note that captcha and recaptcha can be turned off so neither are used.

Set up file upload

3.3 Add store website defaults

To enhance store performance and usability it is suggested to add slscart defaults to the store.

3.4 Add instant inventory control

Add instant inventory control to mitigate over ordering. Most stores do not set this up.

3.5 config file Modifications

These are added at the bottom of the config.php file in the sbconf directory. Only the define line is necessary.

3.5.1 Add link to Email program

Add a link to an email client. See the Add email client link for more details.

3.5.2 Secure the store

There must be an SSL certificate for your domain on the server for https to work.
Ths feature secures the store area. Set to true to use https (secure) or false to use http (unsecure). If this define is missing, the store is unsecure.

define("SB_SECURE_SITE", true);

3.5.3 Secure the store administration

There must be an SSL certificate for your domain on the server for https to work.
Ths feature secures the store admin area. Set to true to use https (secure) or false to use http (unsecure). If this define is missing, the store admin area is unsecure.

define("SB_SECURE_ADMIN", true);

3.5.4 Secure Mals shopping cart

Ths feature secures the Mals shopping cart. Set to true to use https (secure) or false to use http (unsecure). If this define is missing, the Mals shopping cart is unsecure. This does not require an SSL certificate because it is on the Mals site and they provide one.

define("SB_SECURE_CART", true);

3.5.5 Set up default handling of incorrect parameters

If not defined, default handling of incorrect item= or category= parameters is used which is to give a normal response. You want to generate an error page because search engines, such as Google, penalize sites that have an error but give a normal response.

define("SB_404_PAGE", "");

3.5.6 Set up your site to use SMTP outgoing mail instead of regular mail.

Starting in version 10.4.3 this has been moved to Administration > Extras

To use PHP mail(), set SLS_SMTP_HOST to "" or delete the associated defines. Ask your host about the parameters.

define("SLS_SMTP_USER", "smtp user");
define("SLS_SMTP_PASSWORD", "smtp password");
define("SLS_SMTP_AUTH", TRUE);    // TRUE or FALSE. Authentication method
define("SLS_SMTP_PORT", 587);    // whole number.
define("SLS_SMTP_SECURE", "tls");    // "", "ssl", "tls"  connection security

4 Advanced Modifications

4.1 Cookie encryption

slscart 10.4.3 or later

The salt value is created automatically. The salt length is not an issue anymore. The salt value can manually be changed, but it is not necessary.

slscart 10.4.2 or before

Change any characters - used to help encrypt and decrypt slscart's cookies - keep at 32 characters. Only use lower case letters, upper case letters, and digits.

define('SB_PASS_SALT', "EEryKkDKBerBwjJHjyG5s5ruEzYZkec6");

To create a replacement value (in between the double quotes), use this link:

Generate a Salt Value

Click on the 'Generate a salt' button several times then copy and paste the value.