Jump to content
thirty bees forum

the.rampage.rado

Silver member
  • Posts

    895
  • Joined

  • Last visited

  • Days Won

    61

Posts posted by the.rampage.rado

  1. On 3/23/2024 at 3:42 AM, the.rampage.rado said:

    I have plenty of those requests "//2019/wp-includes/wlwmanifest.xml" what should be the formatting in the first part of the redirect?

    To update on a fix I found and worked for me.

    All of those requests starting with // contain wp-includes, wp-admin or wp-content so this solves the issue:

     

    RedirectMatch 301 wp-includes /modules/blackholebots/blackhole/
    RedirectMatch 301 wp-admin /modules/blackholebots/blackhole/
    RedirectMatch 301 wp-content /modules/blackholebots/blackhole/

     

    • Like 1
  2. As you probably know this is a security topic since couple of years.

    Be default thirtybees (and PS in that matter) does not come with default policy and on this test a vanilla installation fails with F.


    One way to implement some of the most important headers is to add this code to the beginning of your htaccess file:

     

    <IfModule mod_headers.c>
       Header set Content-Security-Policy "default-src 'unsafe-inline' 'unsafe-eval' 'self' *.googleapis.com *.gstatic.com *.cloudflare.com *.googletagmanager.com *.google-analytics.com *.youtube.com *.google.com;"
       Header set X-XSS-Protection "1; mode=block"
       Header always append X-Frame-Options SAMEORIGIN
       Header set X-Content-Type-Options nosniff
       Header set Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
       Header set Referrer-Policy: strict-origin-when-cross-origin
       Header unset X-Powered-By
       Header always unset X-Powered-By
    </IfModule>


    This code is far from perfect, unsafe-inline and unsafe-eval should be used very carefully but should we remove them completely if we're not sure if we have embedded js. This code gives A on this test but keep in mind that on the first row you should add all external resources you use and on each row the settings should be customised to your needs. This is what appears to work for me.

    Another (nicer) solution is this free module from nenes25 which adds further options for logging, debugging and testing in BO. Unfortunately the support for PS1.6.1.x that is advertised in his blog does not translate in the latest 0.4 version and I'm unable to install it on my test setup. 

     

    What are you using to fix this?

  3. I stumbled upon an easy fix that is recommended a lot online for this notice in Google Page Speed and I would like to ask the members with coding if it works and should we really care about this notice?

    https://github.com/zzarcon/default-passive-events

    I'm using it by adding this code to Custom code of my thirtybees and when checking with the tool this notice is gone. There are comments online that this file should be loaded before everything else .js and not on the end of the page as we move them with thirtybees. I'm unable to observe any scrolling improvement (or I'm not looking where I should)... Of course one less line in the Google report means the report gathers 1 point overall, not much but in the end if this works it's a five minute job.

     

    <script type="text/javascript" src="https://unpkg.com/default-passive-events"></script>



    If this works could we implement this tiny .js file locally to avoid using one more connection to external CDN?

  4. For the slider: disable (an uninstall if you don't plan to use) this module image.png.69c2a58ef66e1d9975249df017d86582.png
    ---------------------------------------------------------------------------------------------------------------------------------------------------------------
    For the buy now button probably you have this setting turned off:
    image.png.5d14f126f5d586d86d4e8e83d593411d.png
    (in Product page, just under the product name).

    Other than that you have to have quantities available to sell, otherwise the system will hide this button.

    Here depending on your settings you will have 'normal' products without combinations (so only 1 combination per product, lets say this candle is only one size and one color, so no user selection is required) or with combinations (few sizes and/or few colors). If you have this cleared and configured per product you have to assign stock for each product combination here: image.thumb.png.55b350224eff2543558603c4a52adaf3.png

    On the same page you might wish to not use available quantities at all (lets say you're drop shipping and you know that the product is always available) with this setting: image.png.f8254e9dfb16b0f993be5fbb1568e769.png
    (adjust this only if needed as it's per-product and you should go in each product and fix it later). 'Allow orders' will enable purchase even if you have zeroes in all the combinations above. After the order is made it will show negative value.

    One more reason not to show this button is advanced stock management but it's quite advanced and probably you have not adjusted anything there so I will not go in that hole 🙂

  5. Glad to hear that!

    Could you post your error here just for reference, this will help weed out the bug (if present). But probably it's some sort of caching issue with your configuration or server if you managed with other browser.

  6. tbupdater and Core updater are two different modules.

    tbupdater updated the modules up to thirtybees version 1.4, now this functionality is included in the core.

    Core updater updates everything else and it should continue to be used. This module is compatible with all thirtybees versions since its introduction back in 1.0.8 or something like that...

    If you updated to thirtybees 1.5 you should check the forum thread, there are couple of other such minor changes that will take you 5 minutes - minification module and mail transport module and configuration.

     

    • Like 1
  7. Are you uploading this zip?

    image.png.84602e4b7965ede8cadd94c4c8b33c0d.png

    This is the feature you need in this case - it will go through your img folder and find all images not associated with products. Just curious how many it will find, please share! 🙂

  8. Those plugins (especially the one from Mediacom) do much more than clearing old images. If you can squeeze few more moths out of your current plan it might be worth to invest one of them. Clearing old connections and logs could also sligtly imrpove your site speed (old images are just junk, they don't slow it down).

  9. Keep the first part of the cache as follows and many of the changes you push to your frontend will be seen right away. Nevertheless when editing themes/BO stuff your best friend is the Clear cache button and this is not an issue but a feature.

    image.png.ec815f6612c8a0e08d9738bda4efe99b.png

    • Like 1
×
×
  • Create New...