Magento
Last-minute updates are the most common cause of downtime...
Table of ContentsPreparing for Black Friday & Cyber MondayPreparing for Black Friday & Cyber Monday Black Friday and Cyber Monday remain the busiest periods of the year for most eCommerce stores. The uplift in traffic, orders and customer expectations can be significant, which is why preparation is critical. Plan for Capacity - Don't forget to … Continue reading
Magento EOL: Am I able to retain PCI Compliance on Magento 1?
Table of ContentsWhat’s the TL;DR? What do the payment providers say? How risky is remaining on Magento 1 after EOL? What does it mean to not be compliant? And that’s if you can take payments…. The bottom line What if I can’t upgrade in time?With Magento’s end of life (EOL) fast approaching we’ve had some … Continue reading
Debugging Magento 2 Varnish
Table of ContentsBuilt in Varnish Diagnosing Cache Hits Checking by command line Checking using a resource graph Diagnosing why Varnish has no cache hits Other ReadingMagento 2 comes with two options for full page cache (FPC), Built In Varnish Its worth noting that only dynamic content is cached with Magento 2 - and that we … Continue reading
Patching Magento SUPEE-10975
Table of ContentsWhere to download Dependencies Applying the patch Known issuesSUPEE-10975 is an important security update for Magento to address remote code execution and SQL injection vulnerabilities. Where to download Its best downloading the patch from the Magento.com download section - or via MDA - the Magento download tool (this is what this guide will … Continue reading
Patching SUPEE-8788
Table of ContentsWhere to download Dependencies SUPEE-8788 requirements Applying the patch Known issues Patches fail to apply on SWF filesSUPEE-8788 is an important security update for Magento to address remote code execution and SQL injection vulnerabilities. Unfortunately, Magento have released two versions of SUPEE-8788 due to insufficient testing that lead to conflicts with previous patches. … Continue reading
Identifying and blocking "Bad" Magento traffic
Table of ContentsMagento Connect Config Flush Attack SQL Injection Bad Bots/Crawlers/ScrapersThere's a number of common attacks on Magento stores; that can range from aggressive crawlers/bots, to XSS attacks, to severe SQL/compromise attacks. There are two approaches to dealing with attacks of this nature, Automated - Through the use of a WAF Manual - By traversing … Continue reading
Correcting incorrect timestamp after server migration
Table of ContentsAfter DB Import Prior to DB Dump/ImportAn issue we (admittedly infrequently) come across when moving Magento stores from one server to another, is when the previous server's time was incorrect - causing all historical order data to be incorrect on MySQL import. More often than not, we see stores migrated from US West … Continue reading
Fix for "No search results" after CLI reindex on Magento Enterprise (SOLR)
Edit shell/abstract.php and add Mage::app()->addEventArea('adminhtml'); public function __construct() { if ($this->_includeMage) { require_once $this->_getRootPath() . 'app' . DIRECTORY_SEPARATOR . 'Mage.php'; Mage::app($this->_appCode, $this->_appType); + Mage::app()->addEventArea('adminhtml'); } $this->_applyPhpVariables(); $this->_parseArgs(); $this->_construct(); $this->_validate(); $this->_showHelp(); }
Finding all Magento secure URIs
We recently needed to try and identify all HTTPS URI's in a customer's store and had to quickly write a script to scan the core, local and community directories to find any pages that used HTTPS. This is by no means 100% accurate, but will be a good starter indication of finding URL's that are … Continue reading
Simple Magento performance/load testing with Mage-Perftest
Table of ContentsDownloading Mage-Perftest Using Mage-Perftest Examples of use Generate Sitemaps on MageStackMage-Perftest is a simple Linux command line tool to test the performance of your Magento store, it can perform a number of clever operations which makes it far more suitable than siege or ab. Its not a replacement for fully fledged simulation tools … Continue reading