Category: Magento
-
SAYING GOODYE TO TLS 1.0.. WHAT DOES THIS MEAN TO YOU?
The PCI council has stated that by the 30 June 2018 all SSL/early TLS encryption protocols should be disabled in favour of TLS 1.1 or higher (TLS v1.2 is soon to be mandated by most payment gateways) in order to meet the PCI Data Security Standard (PCI DSS) for safeguarding payment data. Please note that […]
-
EBIZMARTS DIRECT PAYMENT INTEGRATION TO BE DISABLED.
To improve the security of our clients and their end users we have decided to actively disable the Direct payment method provided by the Ebizmarts Sagepay suite. The Ebizmarts Sagepay suite, both the free and the Commercial version is a popular Payment Method for many magento merchants. It offers 3 methods of accepting payment methods. Form. This […]
-
ECOMMERCE: THE EVOLUTION OF SHOPPERS HABITS
Black Friday and the long-term change in shoppers habits Barclay Card, who currently process nearly half of all UK debit and credit card transactions, stated there was a rise of 8% on 2016 spending during Black Friday. What these figure don’t show is a continuing shift in customers shopping habits with a decrease in people […]
-
SUPEE-10570: MAGENTO SECURITY UPDATE
SUPEE-10570, Magento Commerce 1.14.3.8 and Open Source 1.9.3.8 contain multiple security enhancements that help close remote code execution (RCE), cross-site scripting (XSS, and other issues). These releases also include small functional fixes listed in the release notes. Information on all the changes in 1.14.3.8 and 1.9.3.8 releases is available in the Magento Commerce and Magento Open Source release notes. […]
-
SSL APOCALYPSE 4 MONTHS TO GO
While it seemed a long time in the future when this was 1st announced that time is almost upon us. In July this year any site / web page that is not using https will be flagged as “NOT Secure” While this not a problem to a casual blog for an ecommerce site this is […]
-
MAGENTO PATCH NOVEMBER 2017
Magento has released new versions of Magento Commerce and Magento Open Source to increase product security: Magento Commerce 1.14.3.7 Magento Open Source 1.9.3.7 SUPEE-10415 (patch for earlier Magento 1.x versions) These releases contain multiple security changes that help close cross-site scripting and authenticated Admin user remote code execution vulnerabilities. We […]
-
SUPEE-10266 : MAGENTO SECURITY PATCH
SUPEE-10266, Magento Commerce 1.4.3.6 and Open Source 1.9.3.6 contain multiple security enhancements that help close cross-site request forgery (CSRF), unauthorized data leak, and authenticated Admin user remote code execution vulnerabilities. As always raise a ticket and we will apply the patch Full details here: https://magento.com/security/patches/supee-10266
-
INSTALLING A 3RD PARTY SSL
If you opt to purchase a 3rd party ssl you will need to install this yourself in Plesk. 1) Step one is to raise / generate your CSR. Log into Plesk and from Websites and domains select SSL/TLS Certificates Select Add SSL/TLS certificate Give the SSL a title eg ev2017 Complete the information accurately. This will be encoded into your […]
-
2016 REVIEW
2016 was a great year for Dx3webs and our customers. We continued our trend of 50% growth year on year and we are investing this in our platform, R&D and customers services. We have continued to expand across Europe and the US. We were particularly pleased to win over North40.com against stiff competition from large […]
-
THE MAGIC OF “UPGRADE-INSECURE-REQUESTS”
We have been encouraging all store owners to move to https over the last year or so. An ssl certificate with warranty can be had for as little as £39.99 per year or even a Let’s Encrypt non-warranty ssl for free. So there is no excuse for not serving all pages over https. Magento has two base […]
