You open your analytics and something is badly wrong. There are fifty people on the site at once. They are in countries you have never sold to. Each one arrives, stays a few seconds, and vanishes. By the end of the day you have had twenty thousand visitors instead of the usual few hundred. The first thought is almost always the same one: have we […]
Ten responsibly disclosed vulnerabilities were fixed across three CubeCart releases, including one rated CVSS 9.0. Here is what was found, and why authenticated-only is less reassuring than it sounds.
Reviews are the one thing on a product page customers actually believe. Here is how to ask for them properly, how to handle bad ones, and what the DMCC Act now requires of you.
UK and EU distance selling rules give customers a cooling off period. CubeCart 6.7.4 added a proper request workflow with states, automatic acknowledgements and an audit trail.
CubeCart 6.7.4 added a statutory cancellation workflow for UK and EU merchants, a proper command line cron runner, and gzip compression of order baskets.
Magecart injects JavaScript into your checkout to copy card details as customers type. The shop keeps working, the order completes, and nothing looks broken. Here is how it gets in and what actually reduces the risk.
One shared image component everywhere, image search across the file manager, per-option product images, and uploads that select themselves. Plus the protective htaccess worth checking after a migration.
CubeCart now records every admin action with actor, IP and a diff, logs outbound HTTP calls, and deduplicates error rows so the log is actually readable.
CubeCart email now sends asynchronously via cron, tracks opens, and generates plain text automatically. It also shipped with a bug that sent blank order confirmations, fixed in 6.7.2.
MySQL moved away from MyISAM in 2010, but plenty of WordPress, WooCommerce and older store databases are still quietly running on it. Table level locking costs you exactly when you are busiest.