OSCommerce site host recommendation

Hi all,

I am completely new to hosting, and am looking for some recommendations. If I put some key points down, I'd appreciate suggestions. Forgive the non-technical terminology:

1. We don't want to be involved with any server maintenance, so patching, backups, plugging security holes etc should be down to the host. We don't mind shared servers.

eg: http://www.webhostingtalk.com/showthread.php?t=90440...

Stuff like the above has made me p-a-r-a-n-o-i-d and the site hasn't even launched

2. Following on from (1), I would prefer the host to be VERY familiar with OSCommerce itself in terms of what holes etc to look for. Our site builders will do what they can, but I want the host to be experienced in what they're hosting if that makes sense? They'd know for example the best php/SQL/linux settings for OSC and the database for example.

3. We are using HSBC Secure ePayments from our site (user kept on our site in the sense that the page looks like our page, then they do 3DSecure on another page, then back to our page). So SSL support needed.

4. Guessing UK or USA based as we expect customers from (in order of numbers) UK, USA/Canada, Australia.

5. Flexible bandwidth - if we go over, we'll pay extra, but the site shouldn't be blocked. We have no idea how many hits etc to expect, but absolutely don't want a denial of service.

6. Technical support should be available in theory 24/7, as in if the site goes down, I want to be able to sort it out even at 2am (sounds extreme, but think week before Christmas for example)

7. Not a re-seller and well established - I'm happy to pay extra given (6) above. Thinking from way back in the day, someone like Demon Internet springs to mind. Not the cheapest, but know (knew?) what they're doing.

Thanks for reading!!!!
Raj

Edited by deleted (Mon 28-Jun-10 21:21:10)

1) You'll need to keep your cart updated. This responsibility normally falls in to your realm to keep updated. Some hosts offer one-click installers that you can just click "upgrade" on to do this for you.

2) Most hosts will have some knowledge of OSC but you'll need to see what their support covers. The majority will only cover the service (the hosting) but not the third party scripts that run on top of that. It may be that you need a company that just deals with OSC - but they may be a different company to that who is hosting you. If you find an OSC specialist, they may have preferred hosting partners they use.

3) This should be an easy one as there appears to be a module for HSBC payments and SSL is a fairly straight forward requirement.

4) Down to user preference, if most of your customers are in the UK, it may be best to go for a UK host.

5) Each host may do this differently. Some will send a warning before you go over, giving you chance to upgrade and when you do exceed your limit, will suspend the site. This is very much the norm within the hosting industry.

6) You'll find many who do this - hosting is a very fierce industry and if you don't monitor your servers 24/7, you'll soon find your customers leave elsewhere.

7) Google is your friend on this one - see what other people are saying.

One thing to consider, if you use a shared hosting package, there is always a risk that another site being compromised, could put your data at risk. Not so much credit card information because this is dealt with by your PSP, but personal information that you are taking (names, addresses and so on).

Looking at your own secure environment, such as a VPS will generally give you better uptime and much better security.

Matt

Hi Matt,

Thank you for your detailed reply.

I think the 2 major sticking points are number 6 and 7 now.

Everyone seems to offer 24/7 support, but from reading various forums, it looks like almost none deliver a proper 24/7 service (ie: only L1 support available outside working hours, or support is all outsourced). I would have thought that I would get an SMS or similar if the server went down, or it could be setup like that by the hosting company.

In terms of who is well established, again, there are alot of recommendations out there, but there doesn't seem to be concensus on "the big 5" or similar (think BMW, Mercedes, Audi etc). I spent a few hours looking at the webhostingtalk forums, but again, no real concensus.

Maybe it is simply a very fragmented market...

Thanks again,
Raj

In reply to a post by abd08:

Everyone seems to offer 24/7 support, but from reading various forums, it looks like almost none deliver a proper 24/7 service (ie: only L1 support available outside working hours, or support is all outsourced).

That's the same for the majority of companies throughout the world though.

I would have thought that I would get an SMS or similar if the server went down, or it could be setup like that by the hosting company.

You'd normally be responsible to do that for your own site - Hyperspin can do that for very little each month/year.

The hosting company will possibly have some monitoring for each of their servers, to which they'll be alerted, so they can fix.

Matt

Regarding support, you need to check that telephone support is provided. Many companies only communicate via e-mail.

In reply to a post by abd08:

Hi all,

I am completely new to hosting, and am looking for some recommendations. If I put some key points down, I'd appreciate suggestions. Forgive the non-technical terminology:

1. We don't want to be involved with any server maintenance, so patching, backups, plugging security holes etc should be down to the host. We don't mind shared servers.

eg: http://www.webhostingtalk.com/showthread.php?t=90440...

Stuff like the above has made me p-a-r-a-n-o-i-d and the site hasn't even launched

2. Following on from (1), I would prefer the host to be VERY familiar with OSCommerce itself in terms of what holes etc to look for. Our site builders will do what they can, but I want the host to be experienced in what they're hosting if that makes sense? They'd know for example the best php/SQL/linux settings for OSC and the database for example.

3. We are using HSBC Secure ePayments from our site (user kept on our site in the sense that the page looks like our page, then they do 3DSecure on another page, then back to our page). So SSL support needed.

4. Guessing UK or USA based as we expect customers from (in order of numbers) UK, USA/Canada, Australia.

5. Flexible bandwidth - if we go over, we'll pay extra, but the site shouldn't be blocked. We have no idea how many hits etc to expect, but absolutely don't want a denial of service.

6. Technical support should be available in theory 24/7, as in if the site goes down, I want to be able to sort it out even at 2am (sounds extreme, but think week before Christmas for example)

7. Not a re-seller and well established - I'm happy to pay extra given (6) above. Thinking from way back in the day, someone like Demon Internet springs to mind. Not the cheapest, but know (knew?) what they're doing.

Thanks for reading!!!!
Raj

1. Either go for shared hosting or a managed server.

2. OSC is ok as a e-commerce software, one of our clients has it on our servers and is happy with it. The only down side to it is that it isn't updated as quickly as say zen cart or magneto is.

3.Most hosting companys offer this. Either thru a shared ssl or "buy your own ssl cert" and have a dedicated ip (extra cost for the client).

Haven't checked that there is a hsbc plugin for osc !

4. Ip address shouldn't worry you then .

5. As uno said depends on host. Do you know roughly how much bandwidth you would need . 10, 50 or 300gb p/m ?

6. Again depends on host. We have had to work through the night at times to fix stuff when it goes wrong. Most of the time its a case of the httpd service needing to be restarted.

7. Would suggest you use a monthly based host to start with if your not sure.

In reply to a post by abd08:

Hi Matt,

Thank you for your detailed reply.

I think the 2 major sticking points are number 6 and 7 now.

Everyone seems to offer 24/7 support, but from reading various forums, it looks like almost none deliver a proper 24/7 service (ie: only L1 support available outside working hours, or support is all outsourced). I would have thought that I would get an SMS or similar if the server went down, or it could be setup like that by the hosting company.

In terms of who is well established, again, there are alot of recommendations out there, but there doesn't seem to be concensus on "the big 5" or similar (think BMW, Mercedes, Audi etc). I spent a few hours looking at the webhostingtalk forums, but again, no real concensus.

Maybe it is simply a very fragmented market...

Thanks again,
Raj

Biggest thing to do is avoid unlimited bandwidth/hard drive space offers, I think WHT banned offered like that not sure now .

Wow.. thank you all for the replies/information - lots to think about.

I am leaning towards a company called "Rackspace". They have a cloud option which looks interesting, but doesn't offer any kind of server management. Their dedicated server option is too expensive at this point. The support is reputedly second to none, all in-house, 24/7 etc.

In theory, if we went with them, is there a "management company" anyone can recommend that could manage the server for us? I am leaning towards serverwizards.com if that helps.

We can get our website builders to manage the website itself, including patches etc as needed.

The only annoying thing is that the servers are hosted in Chicago, and I think this can affect the SEO rankings if it's targeted at the UK.

Thanks!
Raj

Edited by deleted (Tue 29-Jun-10 14:16:21)

Rackspace - interesting. We see lots of customers move away from them after the first year as they soon find out that you can get similar service for much less.

As Rackspace will admit, you're paying more for the support than the service itself. I think their management/support options are a little overkill for your requirements just at this moment in time.

I'd personally suggest getting a OSC expert to help with the site and then look at one of the more cost effective 'cloud'/vps providers.

Matt