launch3

Hello.

I'm curious if there are any Delavo alternatives that Warriors have had success using (sales processing, affiliate management, etc) for digital products.

I signed up for the Delavo list, got my zip file, and successfully installed it on my server.

Unfortunately, I made the mistake of registering my copy under my main domain name instead of the subdomain I intended to create & put it in (to make life easier and more organized). Their instructions didn't specify otherwise, so I didn't think it would make a difference.

I just heard back from customer support that there is nothing they can do. Really?? Guess I'm not important enough.

So my copy of Delavo, which I was anxious to implement immediately, is basically useless.

Any alternatives products would be appreciated.

Thanks,
Jeff

TheRichJerksNet

Hi Jeff,
Sent you a PM with a solution that can help you ...

James

Intrepreneur

Delavo.. free?

I thought that management tool costs $5400?

launch3

Thanks James. Will take a peek at your solution.

launch3

If you signed up for Delavo last week, the "core" or basic version without plugins is free. I got a number of emails from internet marketers promoting it saying it will be the greatest thing since the moon landing. Unfortunately, I'll never know due to my little mistake.

Intrepreneur

It's the greatest thing since the moon landed, but a very steep curve.

I got a copy over at archangelhost, have to say, I haven't used it yet, but when I find time to sit back and take it all in, I will use it.

TheRichJerksNet

Any questions let me know .. I think you will find it offers everything you need + more and no plugins are required.

James

Thomas Belknap

I am pretty sure the download page said they will change the domain once for free but charge $47 for every time after that.

Is the subdomain the problem? From reading the download page, it shouldn't be a problem for them to change the url.

Sonja

Jeff,

It is just as Thomas told you. You can get it moved once for free and then there is a fee. You can't put it on a subdomain but you can move it to another domain. So if you want to put it on another domain, please just create a helpdesk ticket and tell them your situation and you will be taken of.

TheRichJerksNet

That is where it limits you I guess.. The solution I sent you jeff is good for domain name and sub-domain names both ...

James

Chuck Evans

James, I'd love to take a look also. I've spent 3 days trying to download DELAVO, had emails back and forth with support and still cannot download! I know it's a free product from John and I'm grateful to have gotten in but I've wasted enough time on this!

chuck

UncleHQ

James,

I would be interested in seeing what you are putting up against Delavo.

Chuck,

If you want me to download and install it for you let me know.

Brian

TheRichJerksNet

Hi Chuck,
PM has been sent to you ...

James

TheRichJerksNet

Brian,
I would not say I am putting anything up against Delavo..

What I am building is the most advanced membership script to hit the market with a full all-in-one solution which includes building sites on the fly with no ftp or design software needed. Building memership sites with recurring payment, one time payment, trial access, or free and at the same time run affiliate review sites. All managed from your admin area.

That is just the tip of the iceberg.. complete affiliate system built in and mass mail management built in for members and subscribers or use aweber or getresponse if you wish. Also will include paypal fraud protection against those serial refunders that love to hit IM sites.

No plugins, no third party scripts needed... Best of all it will be very affordable even for those just starting out.

James

UncleHQ

Ok James, sounds very interesting - would you please PM me the details?

Brian

Intrepreneur

James sounds AMAZING..

I'm finding it tough with the product so far, finding it very difficult to work out how to use it.

Mubarak Waseem

For all those who need a little help:

Create a product first - The options are easy enough
Then create a package - Put your product in the package - Then your can set your order page to be in the DelAvo theme - It makes everything a lot easier!

Mubarak

Chuck Evans

Thanks Brian, I'll have a couple of days off soon from the lesson tee...I'll PM you!

chuck

launch3

Thanks Thomas & Sonja.

Here's all I was told:

"Delavo makes a difference between domain names and subdomain names. We are very sorry, but it is not allowed to use Delavo on a subdomain, if your license is associated with the main domain name."

Jeff

UncleHQ

Hi,

Then all you need to do is ask for the license to be changed to the subdomain you want to host it on.

Copy and paste your details:

License Number
Old Registered Domain (Main Domain)
New Domain (subdomain)

Brian

TheRichJerksNet

As a webdeveloper for over 15 years that makes no sense at all to me.. A sub-domain name is the same as the domain name.. It is still on the same host and the same ip.

There is a very powerful benefit to using sub-domain names when it comes to marketing your website / product.

@Intrepreneur - I build highly advanced websites with powerful features but I also make my sites 200% user friendly. All my sites have step by step instructions, help messages on the pages, and etc.

James

dlwalsh

Mark Joyner who never recommends anything recommends Delavo. So who better to believe that Delavo is the best then the father of internet marketing? And of course others are going to recommend their platform over Delavo. That is the nature od sales. But then again, is their platform being recommended by anyone of Mark's caliber? If not, and none are, think about why Mark choose Dealvo as the platform he says EVERYONE should have.

There are contextual help files on every page, videos, manuals, workshops, 1 on 1 Skype consults, email support, all free as was Delavo itself.

And it is very easy to get a domain name changed. Just submit a help desk ticket with your license number, your full name, your old domain and the new domain.

I don't know if Delavo will work on a subdoomain in this format: sub.main.com but I do know it works in this main.com/sub.

However, I will find out and let everyone know.

Donna

launch3

"As a webdeveloper for over 15 years that makes no sense at all to me.. A sub-domain name is the same as the domain name.. It is still on the same host and the same ip.

There is a very powerful benefit to using sub-domain names when it comes to marketing your website / product."


James, I couldn't agree with you more. I've been a web developer for 11 years. I have 16 subdomains on SolveYourProblem.com alone. It makes everything so much easier to organize too.

TheRichJerksNet

Not to mention the boost it gives to the main domain.. Not only boost in search rankings but also boost in authority and branding..

James

dlwalsh

That is the beauty of Delavo. You can run hundreds of domains through just this one platform on a single domain, thereby centralizing your business.

And when you are talking here are you talking subdomains or addon domains?

I hav many of both in my main account. Many are subdomains I run for products I do not want to purchase separate domain names for while others are addon domains for my own products.

And all are run through Delavo.

Donna

John Delavera

Please contact support again or PM the ID of your ticket.

I am not sure what info did you exchange there but
DELAVO CAN be installed to a subdomain. All we have
to do is to change the domain you gave to us.

With more than 5,000 licenses in 1 6 days you can excuse
1 misunderstanding.

Again if this is not resolved ASAP send a PM with your ticket ID

Thanks

John

launch3

Hi Donna.

I'm talking about subdomains.

I registered Delavo to SolveYourProblem.com.

I setup the subdomain hub.solveyourproblem.com to run Delavo. I wanted it to be the central entry point for affiliates, partners, etc...

Installation went perfectly, but the message on my screen was "Sorry, your license does not allow to install the script on domain hub.solveyourproblem.com"

Jeff

launch3

Hey John.

Thx much.

I'd really like to see Delavo in action after all the buzz (plus my growing digital product line & desire for an army of affiliates).

Jeff

dlwalsh

Hi Jeff

That would be because your license is associated with SolveYourProblem.com

But I am going to personally change that domain to hub.SolveYourProblem.com

I will PM you with the details on how to get your new installation kit so give me 5 minutes.

Donna

dlwalsh

Ok I have changed it and am now sending you a PM

Donna

launch3

Thanks Donna & John.

I've installed Delavo to my subdomain.
No hiccups at all. Very smooth & easy.

I am glad the disappointment of my mistake was short lived and ready to give this baby a whirl.

Jeff

dlwalsh

Glad everything went good.

Donna

alertinvestor

dlwalsh,

You mention in an earlier post that there are all kinds of help files available. Where do I find these. I downloaded the script, unzipped it, but I don't see any install instructions. I went back to the web site and couldn't find any help files.

Am I missing something?

Thanks for any help

UncleHQ

Hi,

I have P.M.'d you the link

Brian

dlwalsh

Hi

You should have gotten an email where you needed to confirm that you wanted more info from Delavo group. After confirming, you shoud get an eamil with the URL and password to downlaod the manuals and videos.

Donna

secretssovaluable

This looks like the same bunch of guys in here posting. I question that some of you are not Delavo affiliates.

Anyhow, I have the link. I haven't downloaded Delavo yet, and to tell you the truth, I didn't really understand the sales pitch. What exactly does Delavo do?

Some useful tools that seem to do the same thing are SalesForce.com, StatsJunkie, and Amember. I don't know, am I completely off track here?

UncleHQ

Hi,

Affiliates for a free product - yeah sure that is why we give so much help ;-)

What sales pitch - Delavo is a solution for running your back office functions like taking orders, collecting payment, tracking affiliates and digitally delivering the goods.

Sure there are other tools that do some or most of the functions - for someone like myself who has used all the versions over the last 3 1/2 years though there is nothing like a script you can trust.

Brian

TheRichJerksNet

I am not an affiliate - Although I do have a full membership solution that offers 3 times what Amembers does and it's 3 times cheaper price wise ... lol

James

designfuschion

I've got the download links for delavo. At first a little confused but eventually realised i had to enter a domain name for hosting.

Does it matter what domain its on? I really want to just get it installed and take a look.I don't have digital products to launch or sell-so that means i dont have any relevant domains.
I was thinking of putting delavo on a subdomain or in a folder of 1 of my domains
eg.
hub.domain.com or domain.com/hub
(borrowing the OP term hub)
I have 3 domains i was thinking of installing it to..designfuschion.com(personal) /devfresh.com (future products/blog site)or rockyourplr.com ( this won't be main product)

So if i registered it with hub.designfuschion.com -only those who i give link to would know there is even hub.designfuschion.com right?

I don't particularly want to register a domain just to see if delavo is for me.
If i understand correctly,the first domain wouldn't matter too much if it handles more than 1 domain.

dlwalsh

You can install Delavo on a subdomain or even in a folder of a domain. I have my test version of Delavo installed in a folder on my consult site like this: myconsultsite.com/Delavo.

But you could install as you said on hub.mysite.com But id you install like this, hub.mysite.com is the domain that most be associated with your license, not mysite.com

Donna

Devan Koshal

ive been looking through delavo powerful software but there are a few things that worry me.

For one, sensitive customer details are not being encrypted in the database. The admins password is not encrypted in the database, not even with the basic md5 hash.

so if the database is breached, the customers details can be stolen or the hacker gets direct access to your admin details will no real effort. everything is in plain view.

just something to look out for.

TheRichJerksNet

Devan,
I do not have nor do I own Delavo but I have been a website developer for over 15 years so let me give you my input...

MD5'ing an admin password is one of the most stupidest things a site developer can do. MD5 for one means nothing in the database because a hacker can still get access to your admin if they get access to the database. 2nd MD5 slows down the way the database proccesses and when that happens it slows down the site. Slap 20,000+ members on a site at once with MD5 and don't you see many of them drop your membership in a minute.

If you are on a proper host then you have nothing to worry about. Now nothing is 100% secured and anything can be hacked. Point is though it is your respoinsibility to make sure you have a secure server. It is the developers responsibility that he/she developed a secure script.

I am sure john has security on his script as I see no reason why he would'nt...

James

dlwalsh

People on the Fantsos forum have stated that they have tried to hack Fantasos. No one has succeeded. Delavo is built on Fantasos engine so I am positive it is as secure as Fantasos.

Just recently somone tried to steal one of my products by hitting the back browser in the Payment gate. Delavo denied access to the downloads. Then the person was stupid enough to ask me for the Product saying my system didn't give them access. Well, duh.

Donna

Devan Koshal

hashing & salting user passwords wether it be using md5, sha1 or sha512 is a proven technique to protecting user passwords. It's used in a lot of applications including wordpress and similar methods are implemented by amazon & ebay.

It's bad practice to store passwords in the database unhashed or unencrypted.

md5 alone is not as effective as it used to be, but salting the password then hashing the password is much more effective. Using this method for only logins does not slow down the software dramatically. Using php to hash and salt the password before hand does not put any extra load on the database as its all done before the string is sent to the database. I don't mean use the functions built in to the database to hash the password, if thats what you thought i meant.

There probably is security settings built into delavo but looking at the database structure that is what i saw.

TheRichJerksNet

You are missing the entire point .. MD5 is trash I do not care how you look at it. Some places are using "Salt" to block auto submission software not to protect any passwords.

This is the point though - If the hacker has access to your database then it does not matter what you have encrypted because they can do many things within your database and you never even know it. They could even run a log script to track everything going on in your system, and you would never know it..

You need to secure your site and secure access to your database not the passwords.

James

Devan Koshal

It's still best practice to hash all passwords. and thats what i was on about by encrypting users sensitive details. If the database is fully breeched the details are in plain view.

even if the hacker only pulls one table from the database if that table contains users passwords, the hacker has access to the sensitive data via the application.

TheRichJerksNet

If a hacker pulls one table then he will have access to the entire database.. Please understand I have built over 10,000+ custom websites for clients. I build all my sites from the ground up (I do not use open source code to build sites) and every single site has security built in, so I fully understand what I talk about when it comes to security.

It is your responsibility to have a secured host so no hackers even get that far. Please do not try to put this responsibility off on a developer. I fully disagree with the encryption of passwords because it does not mean anything.

There are many things you can do besides have a secure host and that is to install extra security measures, such as Bad-Bot Killer which is a product I developed that blocks bots from your server... Well over 1,000 customers use this script on their server as well as me.

Something else that you may not have considered. Let's say you have a database with encrypted passwords and a year later you outgrow your site and you have 50,000+ members and you decide you want a custom script built. Well there is a problem, your database must be integrated in with this new script which requires scripts to be built to transfer the information from one database built by one developer to another database built by a different developer.

The problem is because the passwords are encrypted, all passwords must be reset to a default one and all members would have to login the new system to change their passwords. The problem here is all default passwords would have to be the same. This could cause problems is someone figures out everyones password is the same.

So you see, not only is encrypting passwords useless but it could cuase you problems later down the road. The above is just one example.

James

Thomas Belknap

If the person has access to the database, then why would they care what passwords are in there? Passwords give access and it would seem they would already have access without the passwords.

Now if it was credit card details that are in plain site then I would agree.

stevenh512

Exactly.. you can't get access to just one table, if you can access the one table you can access the whole database.

But at the same time, there have been known security vulnerabilities in quite a few web scripts (opensource or proprietary) that have caused a lot of trouble recently. While you have a responsibility to have a secure host, the developer has a responsibility to write secure software too, especially in the case where you can not modify the software yourself to fix any security vulnerabilities you find because the developer hasn't provided editable source code (for example, a script with heavily obfuscated source code or an IonCube or Zend encoded script).

I don't know specifically about Bad-Bot Killer since I've never used it, but there are a number of different scripts that block certain bots, IPs of known hackers and forum spammers, etc. I'm assuming Bad-Bot Killer is something along those likes. Always a good idea to have something like that as an extra line of defense.

Not necessarily. That's one way to handle it, for sure, but considering that most PHP scripts use one of 3 methods (MD5, SHA1 or the much-hated crypt() function) it wouldn't be too hard to let your new developer know what hash or encryption algorithm the old script was using to hash the passwords. Even failing that, it would be trivial to write a small script that generates a random password for each user, emails it to that user and hashes it with the new script's hash algorithm to store it in the database.

But there is one thing to keep in mind when you're thinking about encrypting passwords in the database. How many of us use SSL on our login pages (or any page where a user might enter or change their password)? What good does it do to encrypt the password in the database when that password is always sent "in the clear" from the user to the server every time they log in?

TheRichJerksNet

This I agree with and that is the exact reason I do NOT use open source code. Sure I have been known to use a free html editor and even buy a license for one. AP uses a full licensed HTML Editor. As far as the sites coding and functions, I build it all from scratch. I secure my scripts as much as humanly possible.

When using open source and trying to tie this together and that together from different developers is causes security issues that many may not even realize until it is too late. The same goes for that free ajax code and etc many use.. Again I build all my own and always will because I care about the product I put out and I care about my customers.

BadBot-Killer (depending upon which version you have) has ip/country blocking, badbot blocking, tracking, and stats... I developed it so it could be used on any php enabled website.

As far as modifying the software yourself, you must understand a developer spends 2, 3, 6 months on a project to build a script. They sure as heck do not want anybody and everybody just getting it and selling it on DP or eBay ... This would kill all sales for the developer, so the developer just wasted months of their time just for some warez user to giveaway or sell a script they never paid for.

Personally speaking for myself I fully support the scripts I have built and if any bugs found I fix them..

James