165 results found

1. Captcha functionality

   Please note: this idea required splitting so that various points may be addressed as information becomes available.

   New request:

   Captcha functionality - when users initially come into the site or users are starting an order or users are entering credit card information

   Original request:

   Please help with implementing below security features ASAP. There are so many frequent attacks on the website that causes the websites to go down.

   1. Geographical Rate Limiting - Add rules with rate limiting for traffic outside of specific countries (Challenge beyond the primary range/limit and block beyond the secondary range/limit)
   2. Basic Rate Limiting - Can we add a rule with rate limiting to block DoS attacks
   3. Bot Protection - Challenge suspected bots to confirm user authenticity
   4. Bot detection with javascript to identify headless browsers
   5. Captcha functionality - when users initially come into the site or users are starting an order or users are entering credit card information
   6. WAF compromised credentials check
   7. Any other WAF rules to protect the website from anonymous usage and attacks

   There are multiple problems if there are no proper security rules in place.

   • Problem-1: Websites are going down – Loss of business and sales
   • Problem-2: There are many unnoticed attacks, as we know the attacks only after the websites go down
   • Problem-3: There is a possibility of data mining from our websites if there is no security rules

   Please note: this idea required splitting so that various points may be addressed as information becomes available.

   New request:

   Captcha functionality - when users initially come into the site or users are starting an order or users are entering credit card information

   Original request:

   Please help with implementing below security features ASAP. There are so many frequent attacks on the website that causes the websites to go down.

   1. Geographical Rate Limiting - Add rules with rate limiting for traffic outside of specific countries (Challenge beyond the primary range/limit and block beyond the secondary range/limit)
   2. Basic Rate Limiting - Can we… more
   10 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   2 comments  ·  Delete…  ·  Admin →
   How important is this to you?

   Nice to have You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating
   Gathering Feedback  ·  AdminSara Winter (Principal Product Manager, Optimizely) responded

   Thank you for submitting this request! Our team is currently reviewing if and how we may implement this feature, particularly with consideration of our wide client base. We will provide an update once we have completed this investigation.

2. Bot prevention measures

   Please note: this idea required splitting so that various points may be addressed as information becomes available.

   New request:

   1. Bot Protection - Challenge suspected bots to confirm user authenticity
   2. Bot detection with javascript to identify headless browsers
   3. Any other WAF rules to protect the website from anonymous usage and attacks

   Original request:

   Please help with implementing below security features ASAP. There are so many frequent attacks on the website that causes the websites to go down.

   1. Geographical Rate Limiting - Add rules with rate limiting for traffic outside of specific countries (Challenge beyond the primary range/limit and block beyond the secondary range/limit)
   2. Basic Rate Limiting - Can we add a rule with rate limiting to block DoS attacks
   3. Bot Protection - Challenge suspected bots to confirm user authenticity
   4. Bot detection with javascript to identify headless browsers
   5. Captcha functionality - when users initially come into the site or users are starting an order or users are entering credit card information
   6. WAF compromised credentials check
   7. Any other WAF rules to protect the website from anonymous usage and attacks

   There are multiple problems if there are no proper security rules in place.

   • Problem-1: Websites are going down – Loss of business and sales
   • Problem-2: There are many unnoticed attacks, as we know the attacks only after the websites go down
   • Problem-3: There is a possibility of data mining from our websites if there is no security rules

   Please note: this idea required splitting so that various points may be addressed as information becomes available.

   New request:

   1. Bot Protection - Challenge suspected bots to confirm user authenticity
   2. Bot detection with javascript to identify headless browsers
   3. Any other WAF rules to protect the website from anonymous usage and attacks

   Original request:

   Please help with implementing below security features ASAP. There are so many frequent attacks on the website that causes the websites to go down.

   1. Geographical Rate Limiting - Add rules with rate limiting for traffic outside of specific countries (Challenge beyond the primary range/limit and block beyond the… more
   11 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   New  ·  0 comments  ·  Delete…  ·  Admin →
   How important is this to you?

   Nice to have You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

3. Promotions - BOGO Improvement

   We are having an issue with a Buy One Get One Free Promo. 
   [It requires too many promotions to be setup to be able to support this type of promotion.]

   This promo does work when you just order 1 of the MILW 3697-22 and you get a free MILW 48-11-1865
   BUT if a customer were to order more than 1 lets say 4 for example, it's only still giving them 1 free MILW 48-11-1865 when it should give them 4 free MILW 48-11-1865, since it is a Buy one Get one.

   [Multiple promotions are required to set this up which result in potentially hundreds of promotions to support a single BOGO type campaign]

   If I were to walk into a retailer like Home Depot or Lowe’s, or place an order on their websites, I would be able to add four qualifying items and receive four batteries for free, as outlined in my example.

   With all due respect, this type of functionality is fairly common within eCommerce. It would be beneficial to see more forward-thinking development around promotional capabilities to better align with standard market expectations and customer buying behavior.

   We are having an issue with a Buy One Get One Free Promo. 
   [It requires too many promotions to be setup to be able to support this type of promotion.]

   This promo does work when you just order 1 of the MILW 3697-22 and you get a free MILW 48-11-1865
   BUT if a customer were to order more than 1 lets say 4 for example, it's only still giving them 1 free MILW 48-11-1865 when it should give them 4 free MILW 48-11-1865, since it is a Buy one Get one.

   [Multiple promotions are required to set this up which… more

   •  

   3 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   1 comment  ·  Delete…  ·  Admin →
   How important is this to you?

   Nice to have You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating
   Gathering Feedback  ·  AdminSara Winter (Principal Product Manager, Optimizely) responded

   Thank you for submitting this request! We have added this item to our backlog for future consideration and prioritization.

4. We need to be either notified or be able to see the Password re-set e-mails being suppressed in at Optimizely

   We need to be either notified or be able to see the Password re-set e-mails being suppressed in at Optimizely

   4 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   New  ·  3 comments  ·  Delete…  ·  Admin →
   How important is this to you?

   Nice to have You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

5. Quote Workflows for Console and Website Users

   Configured Commerce quotes are ok at gathering a quote request, but are terrible beyond that.

   There needs to be the ability for the sales representative or for an admin console user to edit the quote. We often have regional substitutions that are functionally the same item, but we cannot make substitutions to the quote. We also cannot remove a quoted item from the quote. If we were to quote other items but not that one and Propose a quote, the customer cannot remove the unquoted item and can check out with an item with an invalid price. The sales person and the customer requesting the quote do not get notifications on messages requesting clarification. All in all this tool is not robust.

   We realize that our use case scenario is different than many as we have many products that are unpriced for some or many customers who want to use the website as a discovery tool. But even if everything was priced, I feel this change would be beneficial.

   Configured Commerce quotes are ok at gathering a quote request, but are terrible beyond that.

   There needs to be the ability for the sales representative or for an admin console user to edit the quote. We often have regional substitutions that are functionally the same item, but we cannot make substitutions to the quote. We also cannot remove a quoted item from the quote. If we were to quote other items but not that one and Propose a quote, the customer cannot remove the unquoted item and can check out with an item with an invalid price. The sales person… more

   4 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Delete…  ·  Admin →
   How important is this to you?

   Nice to have You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating
   Gathering Feedback  ·  AdminSara Winter (Principal Product Manager, Optimizely) responded

   Thank you for submitting this request!

   
   

   We have added this item to our backlog for future consideration and prioritization.

   
   

6. Website User 'Approver' shows GUID value, not readable ID/name

   Website Users>Details show GUID in 'Approver' field, however, export of users correctly shows ID/name of the 'Approver'. As an administrator of user accounts, I need ability to see 'Approver' ID/Name on the user Details page, instead of requiring export of all users to view the identity of the Approver.

   •  

   17 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   Gathering Feedback  ·  3 comments  ·  Delete…  ·  Admin →
   How important is this to you?

   Nice to have You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

7. Website Stability via Rate Limiting

   Please note: this idea required splitting so that various points may be addressed as information becomes available.

   New request:

   1. Geographical Rate Limiting - Add rules with rate limiting for traffic outside of specific countries (Challenge beyond the primary range/limit and block beyond the secondary range/limit)
   2. Basic Rate Limiting - Can we add a rule with rate limiting to block DoS attacks

   Original request:

   Please help with implementing below security features ASAP. There are so many frequent attacks on the website that causes the websites to go down.

   1. Geographical Rate Limiting - Add rules with rate limiting for traffic outside of specific countries (Challenge beyond the primary range/limit and block beyond the secondary range/limit)
   2. Basic Rate Limiting - Can we add a rule with rate limiting to block DoS attacks
   3. Bot Protection - Challenge suspected bots to confirm user authenticity
   4. Bot detection with javascript to identify headless browsers
   5. Captcha functionality - when users initially come into the site or users are starting an order or users are entering credit card information
   6. WAF compromised credentials check
   7. Any other WAF rules to protect the website from anonymous usage and attacks

   There are multiple problems if there are no proper security rules in place.

   • Problem-1: Websites are going down – Loss of business and sales
   • Problem-2: There are many unnoticed attacks, as we know the attacks only after the websites go down
   • Problem-3: There is a possibility of data mining from our websites if there is no security rules

   Please note: this idea required splitting so that various points may be addressed as information becomes available.

   New request:

   1. Geographical Rate Limiting - Add rules with rate limiting for traffic outside of specific countries (Challenge beyond the primary range/limit and block beyond the secondary range/limit)
   2. Basic Rate Limiting - Can we add a rule with rate limiting to block DoS attacks

   Original request:

   Please help with implementing below security features ASAP. There are so many frequent attacks on the website that causes the websites to go down.

   1. Geographical Rate Limiting - Add rules with rate limiting for traffic outside of… more
   6 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   New  ·  0 comments  ·  Delete…  ·  Admin →
   How important is this to you?

   Nice to have You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

8. Configured Commerce Chat bots integration providers

   Most of our customers are implementing AI Chatbot these days, and I really think it should be an Out of the Box feature for most popular Chat bots like TalkDesk, OmniChannel/CoPilot etc to have integration similar to payment gateway or ERP integration into Optimizely.

   Seems to me like a feature where we could expand and add our own provider and that would be useful to a lot of people.

   2 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Delete…  ·  Admin →
   How important is this to you?

   Nice to have You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating
   Gathering Feedback  ·  AdminSara Winter (Principal Product Manager, Optimizely) responded

   Thank you for submitting this request! We are also reviewing Conversational Commerce via VertexAI for Commerce.

   
   

   We have added this item to our backlog for future consideration and prioritization.

   
   

   Please continue to add votes and comments regarding any specific chatbots being frequently integrated along with the types of use cases the chatbot(s) would be most utilized for.

   
   

9. MFA/2FA for Admin Console Access Across All Domains

   Hi Team,

   Referring to tickets #1676413, #1498526, #1492633 and #1721382 —

   The Brasseler client is looking to enable multi-factor authentication (MFA) specifically for the admin account. Could you please confirm if this is supported by Optimizely?

   We reviewed the documentation provided for Set up multi-factor authentication, but it appears to apply at the Opti ID level, whereas the client is specifically looking for MFA enforcement at the admin account level and at Admin site. This request has come from their internal security team.

   We would appreciate your guidance on this.

   Thanks for your support.

   11 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   Gathering Feedback  ·  2 comments  ·  Delete…  ·  Admin →
   How important is this to you?

   Nice to have You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

10. Enable Cloudflare's leaked credentials detection

    Please note: this idea required splitting so that various points may be addressed as information becomes available.

    New request:

    1. WAF compromised credentials check

    Original request:

    Please help with implementing below security features ASAP. There are so many frequent attacks on the website that causes the websites to go down.

    1. Geographical Rate Limiting - Add rules with rate limiting for traffic outside of specific countries (Challenge beyond the primary range/limit and block beyond the secondary range/limit)
    2. Basic Rate Limiting - Can we add a rule with rate limiting to block DoS attacks
    3. Bot Protection - Challenge suspected bots to confirm user authenticity
    4. Bot detection with javascript to identify headless browsers
    5. Captcha functionality - when users initially come into the site or users are starting an order or users are entering credit card information
    6. WAF compromised credentials check
    7. Any other WAF rules to protect the website from anonymous usage and attacks

    There are multiple problems if there are no proper security rules in place.

    • Problem-1: Websites are going down – Loss of business and sales
    • Problem-2: There are many unnoticed attacks, as we know the attacks only after the websites go down
    • Problem-3: There is a possibility of data mining from our websites if there is no security rules

    Please note: this idea required splitting so that various points may be addressed as information becomes available.

    New request:

    1. WAF compromised credentials check

    Original request:

    Please help with implementing below security features ASAP. There are so many frequent attacks on the website that causes the websites to go down.

    1. Geographical Rate Limiting - Add rules with rate limiting for traffic outside of specific countries (Challenge beyond the primary range/limit and block beyond the secondary range/limit)
    2. Basic Rate Limiting - Can we add a rule with rate limiting to block DoS attacks
    3. Bot Protection - Challenge suspected bots to confirm user… more
    5 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    New  ·  0 comments  ·  Delete…  ·  Admin →
    How important is this to you?

    Nice to have You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

11. VMI - Add optional fields for display on labels

    Please add optional fields for display when printing labels for Vendor Managed Inventory:
    - Min/Max
    - Bin Location

    2 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    1 comment  ·  Delete…  ·  Admin →
    How important is this to you?

    Nice to have You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating
    Gathering Feedback  ·  AdminSara Winter (Principal Product Manager, Optimizely) responded

    Thank you for submitting this request! We have added this item to our backlog for future consideration and prioritization.

    
    

    If there are related requirements such as specific locations where these fields would be expected in relation to existing values please make sure to add to this request.

12. Fraud prevention

    We are working to resolve ongoing issues with fraudulent ecommerce orders. Frequently, bots have placed orders using stolen credit card information with valid bill-to addresses but random ship-to addresses. Unfortunately, these orders were shipped before we received dispute requests, which forced us to issue credits to customers and resulted in unrecoverable product losses.

    We attempted to implement the DataDome solution; however, it was not compatible with Optimizely. I also understand that Optimizely currently uses the Spreedly gateway for credit card processing, and I’m aware that Spreedly provides a fraud prevention solution that is not included with Optimizely.

    Could you please let me know if Optimizely has plans to introduce fraud prevention features within its ecommerce platform to help customers reduce the risk of fraudulent orders and financial losses?

    We are working to resolve ongoing issues with fraudulent ecommerce orders. Frequently, bots have placed orders using stolen credit card information with valid bill-to addresses but random ship-to addresses. Unfortunately, these orders were shipped before we received dispute requests, which forced us to issue credits to customers and resulted in unrecoverable product losses.

    We attempted to implement the DataDome solution; however, it was not compatible with Optimizely. I also understand that Optimizely currently uses the Spreedly gateway for credit card processing, and I’m aware that Spreedly provides a fraud prevention solution that is not included with Optimizely.

    Could you please… more

    8 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    New  ·  1 comment  ·  Delete…  ·  Admin →
    How important is this to you?

    Nice to have You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

13. Marketplace for Partner Customizations

    Be able to leverage an Optimizely marketplace for things like approved connectors, blueprints, layouts, widgets etc. from partners rather than relying solely on project level customizations.

    2 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    Gathering Feedback  ·  0 comments  ·  Delete…  ·  Admin →
    How important is this to you?

    Nice to have You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

14. Allow Shared Lists / Transfer Owners

    Ability to transfer a list from one user to another, or have multiple owners of a list (for when B2B User leaves company the lists shared by them are no longer 'abandoned')

    2 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Delete…  ·  Admin →
    How important is this to you?

    Nice to have You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating
    Gathering Feedback  ·  AdminSara Winter (Principal Product Manager, Optimizely) responded

    Thank you for submitting and voting for this request! We have added this item to our backlog for future consideration and prioritization.

15. Allow admin to disable hidden lists

    Provide the ability to toggle on/off "Hide List" on the My Lists and List Details. We have customers who are reporting "missing" lists, when in fact they are hidden and it's become a burden for our customer care teams, based on the number of reports we are getting.

    2 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    1 comment  ·  Delete…  ·  Admin →
    How important is this to you?

    Nice to have You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating
    Gathering Feedback  ·  AdminSara Winter (Principal Product Manager, Optimizely) responded

    Thank you for submitting this request! We have added this item to our backlog for future consideration and prioritization.

    
    

    Can you advise if you are desiring this ability at the website, or customer level?

16. Budgement Enforcement at Order Level

    Looking to have an option to enforce a budget at the order level. We have customers who aren't looking to approve all orders, but only orders over a certain dollar amount for the Buyer 2 role.

    2 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Delete…  ·  Admin →
    How important is this to you?

    Nice to have You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating
    Gathering Feedback  ·  AdminSara Winter (Principal Product Manager, Optimizely) responded

    Thank you for submitting this request! Our team is currently reviewing if and how we may implement this feature, particularly with consideration of our wide client base.

    
    

    We will update this request once we have completed this investigation

17. Enhancement Request: OOTB Support for Additional Payment Gateways

    Description: We would like to request an enhancement to include "Robot Payment" and "GMO" as the OOTB payment gateway. Currently, these payment gateways are not available OOTB. Providing OOTB support for these gateways would significantly benefit customers operating in regions where these payment providers are widely adopted.

    Business Justification : These payment gateways are actively used by our client and are critical for their regional payment requirements. Not available OOTB.
    Native or supported integrations would improve adoption of Optimizely Configured Commerce in regions where these gateways are common.

    Requested Enhancement: Include the mentioned payment gateways as the OOTB supported option.

    Impact : This enhancement would enable faster onboarding for clients with region-specific payment needs. Increase platform competitiveness in global and regional markets

    Description: We would like to request an enhancement to include "Robot Payment" and "GMO" as the OOTB payment gateway. Currently, these payment gateways are not available OOTB. Providing OOTB support for these gateways would significantly benefit customers operating in regions where these payment providers are widely adopted.

    Business Justification : These payment gateways are actively used by our client and are critical for their regional payment requirements. Not available OOTB.
    Native or supported integrations would improve adoption of Optimizely Configured Commerce in regions where these gateways are common.

    Requested Enhancement: Include the mentioned payment gateways as the OOTB supported option.

    … more

    1 vote

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    New  ·  1 comment  ·  Delete…  ·  Admin →
    How important is this to you?

    Nice to have You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

18. Improve the processing time of Restriction Group Rebuild step

    I’m seeing only one CPU core was utilized during the execution of the job Rebuild Search Index. As a result the Restriction Group Rebuild step is very slow, even though there are less than 100 items.

    2 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    New  ·  1 comment  ·  Delete…  ·  Admin →
    How important is this to you?

    Nice to have You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

19. Configured Commerce ODP connector

    Partners/ Clients would like an easy way to configure the OPD connector to pass various custom values from the configured Commerce database to ODP.

    1 vote

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    New  ·  0 comments  ·  Edit…  ·  Delete…  ·  Admin →
    How important is this to you?

    Nice to have You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

20. Prevent bot spamming logs

    We often see a lot of errors in the application logs related to bots spamming the website with URL requests that do not even exist, quite often these end in .php extension; example: https://[ConfiguredCommerceURL]/admin/function.php. These seem to be attacks that try to find vulnerabilities on the website. While often times these are harmless, they do pollute the application logs, making it harder for developers to find actual errors that are worth reporting. This feature request is to simply capture that kind of spam requests and simply block them, without processing anything else (these often come with errors such as 'Unity.Exceptions.InvalidRegistrationException' that arise from trying to find dependencies), upon finding out that the request is simply not valid as there should simply not exist any PHP resources on a Configured Commerce website, they should simply be blocked without actually logging an error. If we want to keep these maybe they should be logged somewhere else than the application logs so they could be more easily analyzed? maybe a list of these requests including the origin IP address.

    We often see a lot of errors in the application logs related to bots spamming the website with URL requests that do not even exist, quite often these end in .php extension; example: https://[ConfiguredCommerceURL]/admin/function.php. These seem to be attacks that try to find vulnerabilities on the website. While often times these are harmless, they do pollute the application logs, making it harder for developers to find actual errors that are worth reporting. This feature request is to simply capture that kind of spam requests and simply block them, without processing anything else (these often come with errors such as 'Unity.Exceptions.InvalidRegistrationException'… more

    15 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    Research & Design  ·  1 comment  ·  Delete…  ·  Admin →
    How important is this to you?

    Nice to have You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating