Throughout 2012, we’ve developed four LemonStand payment modules to handle almost every online payment scenario possible from accepting standard credit card payments to subscriptions and direct debits.

Stripe

Stripe is a simple way to accept payments online without any setup or monthly fees. You only pay 2.9% + 30 cents per successful transaction. Stripe is currently available in the United States and Canada – but might be coming to your homeland soon!

We mainly built our Stripe payment module for LemonStand as it accepts up to a whopping $999,999.99 per single transaction! Okay, you won’t be processing such large transactions everyday, but as eCommerce developers, this is a must for clients selling high value products.

GoCardless

GoCardless does exactly what it says on the tin. No credit or debit cards involved. GoCardless offers an online payment method via Direct Debit for an incredible cost of 1% per transaction.

The GoCardless module is an ideal way to accept any kind of online subscriptions on your LemonStand eCommerce website – United Kingdom only.

Paymill

Outside the US and Canada? Paymill is the perfect alternative payment method to Stripe.

Paymill accepts US$, EUR, CHF, GB£ and various local currencies across the European Union – view full listing of countries and currencies – with a maximum amount for a single transaction of 10,000.00€. Paymill also offers safe 3-D Secure.

CardSave

For merchants already using countertop or wireless CardSave terminals and wanting to extend the integration to their eCommerce websites, CardSave Integrated module for LemonStand is technically the most flexible method to open up the communication with the Cardsave gateway directly on the merchant’s website.

The methods below relate to XSS that involves the theft of user’s cookies by javascript.

Apart from proper sanitisation of input variables, you can force cookies to be HTTP only – which means that javascript cannot access them.

This approach would stop the attacker sending the cookies information to a third party website using javascript.

You can enable HTTP only cookies in a couple of different ways:

How to enable HTTP only cookies with php.ini

Adding the following line will force all cookies created by PHP to be set to HTTP only.

session.cookie_httponly = True

How to enable HTTP only cookies with with a PHP script

Or you can set it in your PHP script to specific cookies, when using the function setcookie and setting the last parameter true.

<?php
   setcookie( 'myCookie', 'love chocolate',
      null, null, null, null, true );
?>

The Lemonade Co. → Live preview

Theme overview

• Responsive design including responsive slideshow
• 10 colour schemes built in, and easily generate you own with LESS
• 10 customizable webfonts, loaded from Google Fonts
• LemonStand options matrix
• Multi-level navigation for nested categories
• Built-in Twitter widget with the ability to turn it on/off per page
• Hover on product thumbnail for second image
• Guest and registered user checkout
• Image zoom on hover for a closer look
• Filter category pages by Cost, Manufacturers, Search Terms and Colours
• Add to cart with AJAX
• Product rating
• Sale page to display latest offers and discounted products automatically
• … As well as all the usual LemonStand features

How to install

Once you purchase The Lemonade Co. theme from the LemonStand marketplace, you should have an LemonStand theme file (.lca). All you have to do is navigate to the themes page within LemonStand backend (CMS > Themes) and import the theme.

This will automatically import the themes pages, layouts, partials, resources and content blocks automatically.

If your icons don’t display correctly, that’s because LemonStand doesn’t allow web fonts by default. You’ll need to add these file types – eot, svg, ttf, woff – to your .htaccess.

To do so, find this line in your .htaccess:

RewriteCond %{REQUEST_URI} !(\.(ico|js|jpg|jpeg|gif|css|png|swf|txt|xml|xls)$) [NC]

And replace it with:

RewriteCond %{REQUEST_URI} !(\.(ico|js|jpg|jpeg|gif|css|png|swf|txt|xml|xls|eot|svg|ttf|woff|md)$) [NC]

How to customize

We have a created a backend interface that will make modifying the themes fonts, colours and other options much easier.

Download the Lemonade theme settings module from LemonStand marketplace.

Upload the module directory to the /modules/ directory in your LemonStand site, and you’re done. The Lemonade Theme Settings panel will be available in your site settings.

Please note: You may need to logout and login again to the backend for this module to install correctly

Support

If you have any questions or need assistance with the module, feel free to drop us a line or leave a comment – we’ll get back to you as soon as we can.

Alternatively, we are active in the #lemonstand IRC channel, feel free to give us a shout.

Facebook OAuth 2.0 registration and sign-in for LemonStand

The module allows users’ registration and login to LemonStand eCommerce platform using their Facebook credentials; saving them the hassle of creating an account in order to checkout.

If you are already running a LemonStand webstore and you install this module, you’ll probably have registered customers trying to sign-in with Facebook. In this scenario, the module will determine registered customers by their email addresses and log them in without creating new users in LemonStand backend.

There is already a Lemonade theme settings module that will let you customize your theme features such as:

• Change theme color
• Change theme heading fonts
• Change theme body fonts

However, sometimes you’ll want to further style the theme by getting into its CSS or even using LESS.

Adding additional stylesheets

— Want to add your own CSS to your LemonStand theme? No problem!

Step 1

Create a CSS file, call it custom.css and save it in /themes/resources/stylesheets/.
This is where you will be adding all your additional CSS.

Step 2

Open /themes/layouts/standard.php, find the css_combine method (located at line 74~) and add your custom.css file to the array:

echo $this->css_combine(array(
	'@stylesheets/foundation.css',
	'@stylesheets/general_foundicons.css',
	'@stylesheets/app.css',
	'@stylesheets/schemes/'.$scheme_css,
	'@stylesheets/heading-fonts/'.$heading_font_css,
	'@stylesheets/body-fonts/'.$body_font_css,
	'@stylesheets/body-fonts/custom.css'
));

Save the changes you made to standard.php. Close it. And you are good to go!

Modifying the Lemonade Co. theme using LESS

We built The Lemonade Co. theme with LESS so we’d be able to make changes to the overall style of the web store quickly and easily.

You’ll find the LESS file you need in /themes/resources/stylesheets/app.less

Once you’ve made your changes to app.less, you’ll need to compile your LESS file into CSS. There are many methods of doing this… the easiest method is to use npm. Once you’ve installed the LESS package, it’s as simple as:

$ lessc app.less > app.css

Alternatively, you can use any of the following applications to compile your LESS for you:

• CodeKit (Mac)
• WinLess (Win)
• SimpLESS (Mac/Win/Linux)
• LiveReload (Mac/Win)

Note that when updating your app.less, the various color options are applied on top of app.css.