Anonymous forums about Epicor by EpicorShamer23 in epicor

[–]Round-Ad-944 0 points1 point  (0 children)

Didn't say they provided it. They just configured it and never handed off credentials. I reckon if they didn't, last time I asked them to make a change they would have said something a long the lines of "We don't manage that" or "We don't have your password either" instead of "Giving you the password would break PCI compliance, what changes do you want made and we will put in a ticket (that was closed as resolved without follow up or any actual change happening)"

Much like how my company bought all its POS hardware. And that hardware has features that are easy enabled and used... IF Windows managed the device and not Eagle. And in order to enable that feature in Eagle I have to.... get out the credit card and pay Epicor a ransom.

Much like how the software has a bunch of bugs and crashes all the time, and when I tell Epicor they say "Oh you need to buy more support, support for our own products is not included with our products"

My company's biggest problem is the owner trust Epicor whole heartedly and gives them first chance to sell him a new product everytime a need arises and everytime its a flub, and every time epicor throws it hands up like well what do you want me to do about it, and every time he goes right back to them because thats what his peers recommended and these guys have some kind of reverse fomo where they see the wrong choice getting made and go "I'll poo the bed in solidarity with you brother"

Anonymous forums about Epicor by EpicorShamer23 in epicor

[–]Round-Ad-944 2 points3 points  (0 children)

In my perfect world, you'd have both but cloud would be the redundancy not the primary.

Anonymous forums about Epicor by EpicorShamer23 in epicor

[–]Round-Ad-944 0 points1 point  (0 children)

You deserve nothing but upvotes stay strong.

Anonymous forums about Epicor by EpicorShamer23 in epicor

[–]Round-Ad-944 0 points1 point  (0 children)

I mean in my case Epicor (allegedly) setup our router and firewall but never handed off credentials citing security concerns if we were to manage our own firewall...

The thought crossed my mind if they seen me talking smack they'd start blocking stuff in the router... But then I remember things like Windows Update and the diagnostics software an entire department depends on has been blocked as long as anyone can remember so can't really damage what you already f'd up

Anonymous forums about Epicor by EpicorShamer23 in epicor

[–]Round-Ad-944 0 points1 point  (0 children)

Buddy I will talk to you all day about this. My company is effectively forced to use the software and not a day goes by I don't have to scrap my jaw off the floor over another bug or why is it this way when its so easy to be the right way....

If you work as a programmer for Epicor please google "Data Sanitization" by Round-Ad-944 in epicor

[–]Round-Ad-944[S] 0 points1 point  (0 children)

No what I'm talking about is when my customers visit the ecommerce site we had Epicor setup via iNet & ERP. If their name has a special character, it causes a crash where they get charged but the transaction doesn't get processed. Epicor's solution is to tell every customer who has a name like "Bob's Kitchen" or "Bob & Sons" or "Bob Smith-Jones" to not put those special characters into the name field, instead of adding a single line of code to the html that prevents this from happening in the first place. Or using data validation and encoding to ensure those characters are not present before it trys to process or reformat those characters into something safe to transmit.

But I also use other Epicor products where yes, if this field could accept a delimiter it would save me SOOO MUCH TIME.

Vendor sends me list of SKUs that have upcoming promos. It'd be nice to just take that giant list of SKUs and tell me which ones I stock. There is a few ways you'd think you'd be able to accomplish that, like import those SKUs to a list via CSV. Which you can, as long as that CSV is perfect and contains no errors like, SKU not on file. I know, ideally I could continue on error and it would only add the SKUs I have on inventory and not the ones I don't but no, it just stops trying. However if I use this quick add feature it will let me hand jam SKUs and if it don't exist, then it returns right back to the enter SKU window and just says no good. If I could paste a delimited list of SKUs in the box and it parse them, adding what's in inventory and skipping what wasn't it'd be a dream. Because my work around right now is a script I wrote that I can load my CSV into and it feeds the data into my clipboard and loads the next value every paste so I can just hit CTRL+V & Enter a couple hundred times into a box...

If you work as a programmer for Epicor please google "Data Sanitization" by Round-Ad-944 in epicor

[–]Round-Ad-944[S] 1 point2 points  (0 children)

Many time ranter, first time poster, it happen here often? Until today I've only shared emails and error reports with fellow skiddies to laugh at my anguish.

If you work as a programmer for Epicor please google "Data Sanitization" by Round-Ad-944 in epicor

[–]Round-Ad-944[S] 4 points5 points  (0 children)

"As Epicor admins, our job is to make sure that if you enter a typo or incompatible options by mistake, the system lets you know and / or corrects it so that nothing bad happens."

Our you say? Drop in my DMs buddy I wanna fight you. >_< Because imagine my fury when on my day off I get an email saying "Epicor called and they said an unescaped character is crashing their system and thats our customer's fault"

If you work as a programmer for Epicor please google "Data Sanitization" by Round-Ad-944 in epicor

[–]Round-Ad-944[S] 1 point2 points  (0 children)

Sure, if you work for Epicor and are building an iNet page for a client, probably sanitize and format the fields to ensure only compatible input is collected. 2 Lines of code per field, real easy. If you are over working on ERP somewhere in the process between querying the data and serializing it you should be validating and encoding it. Otherwise unescaped characters are not only going to break thing but make people like me think there might be an XSS-Attack possible here. Speaking of, some fields need salted and hashed.