Most of the 404s in Search Console want leaving alone. Which ones actually matter, what to do with discontinued products, and why a soft 404 is the one genuinely worth fixing.
CubeCart now hashes passwords with Argon2id and migrates existing accounts transparently on login. Why memory-hard hashing matters, and the hosting requirement that could mean you are not getting it.
CubeCart 6.6.3 upgraded password hashing to Argon2id with transparent migration, overhauled the admin dashboard and made six improvements to Elasticsearch relevance.
You can now see which extensions are installed, which are disabled, which hooks they own and which scheduled tasks they run. Plus a twice-yearly routine worth adopting.
Hooks are why you can customise CubeCart and still upgrade. The hook editor, extension ownership in the registry, and a Smarty security policy that changed four times.
CubeCart’s REST API covers nine resources with Bearer token authentication and per-key rate limiting. What you can build with it, how authentication works, and the one version you must not run it on.
If a CubeCart feature seems to fire erratically or not at all, this is almost certainly why. Setting up a real cron entry is the single most useful thing most stores are missing.
Categories and products can now be restricted to specific customer groups, with bulk group pricing tools. Trade and retail from one store, without a plugin.
Nearly every CubeCart vulnerability fixed this year requires an existing admin session. Two-factor authentication is the control that breaks that chain, and it takes five minutes per account.
Stop pasting tracking snippets into skin templates where upgrades destroy them. One container, managed from a web interface, with purchase tracking and Consent Mode v2 built in.