I date back to 2003 or 2002, although I was probably using a different username. I think I started using ecartz in 2004. When I started, you could choose between using The Exchange Project 2.1 download or milestone 1.

injectAppTop Hook: I can successfully hijack the $_POST['action'] == 'process' submission using an injectAppTop hook, generate the reset key myself, send the HTML email, and redirect the user before the core file runs. This works, but duplicating the core logic in a hook feels heavy. This is what's...

PWA Login is going to be confusing. It's not actually a login. It's bypassing the login process. "Check out as Guest" or "No Login" would make more sense for new users. As is, PWA won't tell customers that they can use it to avoid creating an account. Particularly combined with L...

2. Ensure your domain's primary `@` (A record) and `www` (CNAME or A record) have the **Orange Cloud icon** enabled ("Proxied"). Should also do the AAAA records for @ and possibly www (CNAME replaces both A and AAAA). Modern bots may use IPv6 (AAAA) instead of IPv4 (A). Note that step 1 i...

Set yourself as the manufacturer, manufacturer 1.

All the admin files used to have code that looked like switch ($_GET['action'] ?? '') { case 'do_something': break; default: } The 'do_something' case should go in an action file rather than in a giant switch. The other two parts are infoboxes, which can be different per action, and views, which are...

I think Daniel is just advocating semantic versioning. If you release a change that is not backward compatible, you make it a a.b.C.0. If you release a.b.c.D then it should only have bugfixes (including security fixes) in it compared to a.b.c.0. The problems with this are essentially that it slows d...

Could change the error message. if (isset($option['parameters']) && is_array($option['parameters'])) { foreach ($option['parameters'] as $name => $value) { if (isset($value)) { $field .= sprintf(' %s="%s"', $name, Text::output($value, static::ESCAPES)); } else { trigger_error("...

A side issue here is that if there were less core, there would be less to update and updates could be smaller even if less frequent. I.e. if things like testimonials and advertising were outside core, their updates wouldn't be part of core. As is merchants find themselves updating features that they...

MySQL (and probably MariaDB) can cache database queries if you turn it on.

Cloudflare can cache page hits if you turn that on. It has a free tier.

In addition to robots.txt, etc.