JTS

We finished doing an initial remediation on a site infected with SUPEE-5344 (See previous article). We built a script that we tuned to try and find files infected with our particular variant of this nasty bug. We are providing it (without support/warranty) to the rest of the eCommerce world in the hopes it may help some folks clean their shop.

We highly recommend that folks get a web application firewall like Incapsula or Cloudways nowadays. Its not fool-proof, but it can help mitigate some of these exploits before they begin.

Read More

SUPEE-5344 has been in the wild for a while now, but this is the first site that we’ve had an opportunity to re-mediate.

Read More

Just a quick tip that we hope will save some coders some time. We couldn’t find an easy way to get the reward points that were used in a particular order. The snippet below should help.

Read More

Recently, we had a client that needed to setup their Magento cart to send out emails through Amazon SES. They installed the free SMTP Pro Magento SMTP Email plugin from AScrhoder and tried to configure it to use their Amazon SES account. When they ran the self-test within Magento Admin, they kept getting an error from the Amazon SES server saying “SignatureDoesNotMatch”. After a bit of digging, we finally figured out the solution.

Read More

Recently, Google has started to require that shipping costs be consistent between what is estimated for the product and the final shipping cost. When you setup your Google Merchant Feed you have to setup your shipping costs to adequately reflect what you charge on your site. Debugging issues between your costs and what Google sees can be quite a challenge, so we put together a quick script to make the process easier.

Read More