wakabayashi

I am still confused about this BO Login request. You are afraid of brutforce attacks, right? But is it a real/do you see attacks? Cause in my case I never noticed such trials. I can look into it, but datakick said it would need some override, so I am not sure, if I am going to implement it.

I plan to make a new release of this module next week. I have made some changes, but they aren't very important for basic usage. It's basically interesting for comments section (when you render multiple turnstile containers). It's also possible to load only on input event (if user types) and not on pageload. That way you save time and don't make unnecessary calls - should be good in seo theory. Are there any serious issues or improvements you would need? It would be a good time now, to let me know 😅

What is better for PHPmailer compared to swiftmailer? I am using swiftmailer with a Hetzner server and I have no issues. But ok, I have a dedicated server so I wouldn't know what it even has to do with Hetzner. What kind of server do you have with Hetzner and does it work in outlook or whatever email client?

It's very funny, that I looked at this a week ago and noticed, that it's not possible to select the original source image. @datakick do you think that would be a sensible enhancement? If yes, I could make a PR sooner or later.

Normal customers can't call backoffice controller. But it doesn't necessairly mean, that you don't have issues on the FO. If you are using cloudflare, I would just deactivate it for now. I have done it and everything works fine again.

@datakick Thanks for this post!! I saw some strange setting a few days ago in cloudflare. It's called "Speed Brain". Is this the setting you are talking about? Or where is the exact setting you are talking about? Oh that does maybe exaplain, why some of my customer see the "This cart was already used" error. I have the feeling that the request is sent two times. And now it sounds very likely that my own code sends it automatically by a "fake click" and the cloudflare system could do it too. To me this feature sounds like complete bullshit. It's way too risky.

@datakick great work! IMO "my-honey-trap" should be the default 🤣 😜

How does your robots.txt look like? And please really check the file on the server, not what any tool is saying...

I have just done this merge 3 into 1 thing. Seems to work fine ☺️ But be careful: this is advanced stuff. It's not very hard, but you need to know, what you are doing... I noticed, that stock management is a bit tricky, if you used "share_stock" before 🫣 IMO what you have to do in stock_available table: set id_shoup_group = 0 set id_shop = ID_OF_YOUR_SHOP (note: this can differ from 1) Additional Edit: you should also check ps_configuration table similair to stock_available table

I have my doubts 😅 Talking about "many"... I don't know how many merchants here are interested in something like this. We had once this topic:

I don't have any experience with this modules, but I am interested in the topic too. I am not mainly interested in the translation part, but in generating texts like meta title, meta description... IMO it's important to note that Prestahero is only compatible with PS 1.7-8. It's very very unlikely that you even can use this module with tb.

I guess the question is more, if this should be core stuff or a module. A lot of stores don't need this feature.

I should update this module. Atm I just don't find enough time. Hopefully I can do it next weeks. In general this entry is not all problematic.

Sounds clever 😅 👍

Hm solche Dinge sind immer etwas komplex. Sind das die einzigen Produkte, die du verkaufst? Falls du nicht hunderte bzw. tausende andere Produkte hast, würde ich nach einer Lösung streben mit mehr Produkten und weniger Varianten/Optionen.

Pretty sure, otherwise all links would be broken or not?

Yeah, this is kind of logical. The problem is not the source files or the thumbnails. It's the rewrite.

Then I would bet, that your htaccess or nginx configuration is wrong. As the product images changed the url path. I made this to have a clean structure in urls. My nginx looks like this: # Rewriting for images pretty url location ~* \.(eot|gif|ico|jpg|jpeg|otf|pdf|png|svg|swf|ttf|woff|webp)$ { rewrite ^/categories/([0-9]+)/([^\s/]+)\.webp$ /img/c/$1.webp break; rewrite ^/categories/([0-9]+)-([^\s/]+)/([^\s/]+)\.webp$ /img/c/$1-$2.webp break; rewrite ^/categoriesthumb/([0-9]+)/([^\s/]+)\.webp$ /img/c/thumb/$1.webp break; rewrite ^/categoriesthumb/([0-9]+)-([^\s/]+)/([^\s/]+)\.webp$ /img/c/thumb/$1-$2.webp break; rewrite ^/manufacturers/([0-9]+)/([^\s/]+)\.webp$ /img/m/$1.webp break; rewrite ^/manufacturers/([0-9]+)-([^\s/]+)/([^\s/]+)\.webp$ /img/m/$1-$2.webp break; rewrite ^/scenes/([0-9]+)/([^\s/]+)\.webp$ /img/scenes/$1.webp break; rewrite ^/scenes/([0-9]+)-([^\s/]+)/([^\s/]+)\.webp$ /img/scenes/$1-$2.webp break; rewrite ^/scenesthumb/([0-9]+)/([^\s/]+)\.webp$ /img/scenes/thumbs/$1.webp break; rewrite ^/scenesthumb/([0-9]+)-([^\s/]+)/([^\s/]+)\.webp$ /img/scenes/thumbs/$1-$2.webp break; rewrite ^/stores/([0-9]+)/([^\s/]+)\.webp$ /img/st/$1.webp break; rewrite ^/stores/([0-9]+)-([^\s/]+)/([^\s/]+)\.webp$ /img/st/$1-$2.webp break; rewrite ^/suppliers/([0-9]+)/([^\s/]+)\.webp$ /img/su/$1.webp break; rewrite ^/suppliers/([0-9]+)-([^\s/]+)/([^\s/]+)\.webp$ /img/su/$1-$2.webp break; rewrite ^/products/([0-9])(\-[_a-zA-Z0-9-]*)?(-[0-9]+)?/.+\.webp$ /img/p/$1/$1$2$3.webp break; rewrite ^/products/([0-9])([0-9])(\-[_a-zA-Z0-9-]*)?(-[0-9]+)?/.+\.webp$ /img/p/$1/$2/$1$2$3$4.webp break; rewrite ^/products/([0-9])([0-9])([0-9])(\-[_a-zA-Z0-9-]*)?(-[0-9]+)?/.+\.webp$ /img/p/$1/$2/$3/$1$2$3$4$5.webp break; rewrite ^/products/([0-9])([0-9])([0-9])([0-9])(\-[_a-zA-Z0-9-]*)?(-[0-9]+)?/.+\.webp$ /img/p/$1/$2/$3/$4/$1$2$3$4$5$6.webp break; rewrite ^/products/([0-9])([0-9])([0-9])([0-9])([0-9])(\-[_a-zA-Z0-9-]*)?(-[0-9]+)?/.+\.webp$ /img/p/$1/$2/$3/$4/$5/$1$2$3$4$5$6$7.webp break; rewrite ^/products/([0-9])([0-9])([0-9])([0-9])([0-9])([0-9])(\-[_a-zA-Z0-9-]*)?(-[0-9]+)?/.+\.webp$ /img/p/$1/$2/$3/$4/$5/$6/$1$2$3$4$5$6$7$8.webp break; rewrite ^/products/([0-9])([0-9])([0-9])([0-9])([0-9])([0-9])([0-9])(\-[_a-zA-Z0-9-]*)?(-[0-9]+)?/.+\.webp$ /img/p/$1/$2/$3/$4/$5/$6/$7/$1$2$3$4$5$6$7$8$9.webp break; rewrite ^/products/([0-9])([0-9])([0-9])([0-9])([0-9])([0-9])([0-9])([0-9])(\-[_a-zA-Z0-9-]*)?(-[0-9]+)?/.+\.webp$ /img/p/$1/$2/$3/$4/$5/$6/$7/$8/$1$2$3$4$5$6$7$8$9$10.webp break; allow all; try_files $uri $uri/ /index.php?$args; }

https://crew-mgr.com/shop/ is your shop, right? I really don't know, but these images are just loading normally for me!? 👻 Edit: or is this your live version and you have another version?

While this is very stressful, I would still first try to find out, where the security hole is. Otherwise they might be around soon again.

Just in the core updater, where you updated to bleeding edge...

How does this look like on your store?

I am not totally sure, how the update works technically. But have you done the DB updates as well? 🤔

Thanks for your work, guys! Still very happy to use thirty bees. Obviously I support the project with the monthly subscription and with paid support hours. 😉 I hope, I can find some time for some useful PR on github ⏲️ But I am very busy with my own work, so atm the financial support is easier 🤑

I basically click the button: Sometimes I seem to be logged in. Sometimes not. 🤔 About the routing/redirect. I am not so sure. My nginx settings don't contain anything special with "connect", nor do I have modules that are looking for this. At least thats my feeling.