166 results found

1. Website Stability via Rate Limiting

   Please note: this idea required splitting so that various points may be addressed as information becomes available.

   New request:

   1. Geographical Rate Limiting - Add rules with rate limiting for traffic outside of specific countries (Challenge beyond the primary range/limit and block beyond the secondary range/limit)
   2. Basic Rate Limiting - Can we add a rule with rate limiting to block DoS attacks

   Original request:

   Please help with implementing below security features ASAP. There are so many frequent attacks on the website that causes the websites to go down.

   1. Geographical Rate Limiting - Add rules with rate limiting for traffic outside of specific countries (Challenge beyond the primary range/limit and block beyond the secondary range/limit)
   2. Basic Rate Limiting - Can we add a rule with rate limiting to block DoS attacks
   3. Bot Protection - Challenge suspected bots to confirm user authenticity
   4. Bot detection with javascript to identify headless browsers
   5. Captcha functionality - when users initially come into the site or users are starting an order or users are entering credit card information
   6. WAF compromised credentials check
   7. Any other WAF rules to protect the website from anonymous usage and attacks

   There are multiple problems if there are no proper security rules in place.

   • Problem-1: Websites are going down – Loss of business and sales
   • Problem-2: There are many unnoticed attacks, as we know the attacks only after the websites go down
   • Problem-3: There is a possibility of data mining from our websites if there is no security rules

   Please note: this idea required splitting so that various points may be addressed as information becomes available.

   New request:

   1. Geographical Rate Limiting - Add rules with rate limiting for traffic outside of specific countries (Challenge beyond the primary range/limit and block beyond the secondary range/limit)
   2. Basic Rate Limiting - Can we add a rule with rate limiting to block DoS attacks

   Original request:

   Please help with implementing below security features ASAP. There are so many frequent attacks on the website that causes the websites to go down.

   1. Geographical Rate Limiting - Add rules with rate limiting for traffic outside of… more
   6 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   New  ·  0 comments  ·  Delete…  ·  Admin →
   How important is this to you?

   Nice to have You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

2. PIM - Improvement to digital assets upload process

   Managing digital assets is one of the features of PIM. For entire catalog products, digital assets volume is very large.
   PIM only allows uploading digital assets through browser(confirmed with Optimizely #885640, which is not reliable for large volume of digital assets. We observed issues like digital assets duplicated and not uploaded in some cases. This approach also involves comparatively more efforts to upload digital assets.
   Please built automated approach for uploading digital assets to PIM.

   6 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   Gathering Feedback  ·  0 comments  ·  Delete…  ·  Admin →
   How important is this to you?

   Nice to have You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

3. Multisite Support of Default Warehouse

   We have 2 companies. One in Canada and one in the US. Optimizely does not support having a warehouse in the US as the default for our US site and a Warehouse in Canada as the default for our Canadian Site. We do not ship accross the border.

   6 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   Gathering Feedback  ·  0 comments  ·  Delete…  ·  Admin →
   How important is this to you?

   Nice to have You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

4. Improve logging

   Some clients have voiced their frustrations with finding it difficult to identify issues in the system. Please see the feedback below from one of the clients below.
   * The Elmah instructions are great information and could potentially be helpful. Unfortunately, the log file is so massive that I am not able to navigate it in any meaningful way. Unless I am mistaken there are not any ways to filter the data. I have attempted to download the csv file but the page never returns any results.
   * It would still be massively helpful if something like the datadog trace ID or the HTTP request ID was displayed on the customer-facing unhandled exception window so that we could tie it back to an error if the customer sends us a screenshot. The fact that there is ZERO information on that unhandled exception screen makes it completely useless.
   * I just had a customer complain that they couldn't submit an order due to unhandled exceptions. We impersonated them and were able to submit it fine. I see numerous errors in the logs that seem tagged with that customer's email address but I have no idea which one was causing their actual problem. Or if their real problem was even logged.
   * Another suggestion was to review the Spire logs but nothing there seems to pertain to this customer. The Spire logs have very limited details to attempt to determine what job the error came from.

   Some clients have voiced their frustrations with finding it difficult to identify issues in the system. Please see the feedback below from one of the clients below.
   * The Elmah instructions are great information and could potentially be helpful. Unfortunately, the log file is so massive that I am not able to navigate it in any meaningful way. Unless I am mistaken there are not any ways to filter the data. I have attempted to download the csv file but the page never returns any results.
   * It would still be massively helpful if something like the datadog trace ID… more

   6 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   Gathering Feedback  ·  0 comments  ·  Delete…  ·  Admin →
   How important is this to you?

   Nice to have You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

5. Request for an out of the box configuration setting for when sessions are fully expired

   Request for an out of the box configuration setting for when sessions are fully expired:

   • Session Expiration and let the client decide if they would like to redirect to Session Expired Page, or use Overlay with Session Expired Modal on same page.
   • In this setting we could also provide additional sub-setting with ability to enable a session expiration warning (admin can set the number of minutes)

   Incomplete Client-Side Inactivity Timeout: We have two different issues with this vulnerability,
   • If a customer steps away from their system without an automatic logout after a period of inactivity, there is a risk that others may access sensitive information. (They can’t take any action, however they can see all the information on that current page)
   • Customers believe they are still logged in while attempting to check out or submit orders, only to find themselves logged out unexpectedly. This can be frustrating for them.

   This issue was raised as a security vulnerability by security audit team and it’s also customer experience issue (they are not aware of session expiration). This is already in your tracker but it’s mentioned as “Working as Designed.” but it’s a security issue. Please consider this as a security fix.
   Incomplete Client-Side Inactivity Timeout Low When a user’s session expires, their active window is not redirected to a timeout or login page. Any information on the page remains exposed. Working as Designed. This is currently designed behavior on Storefront, any action on a website after session timeout will redirect user to SignIn page.

   Request for an out of the box configuration setting for when sessions are fully expired:

   • Session Expiration and let the client decide if they would like to redirect to Session Expired Page, or use Overlay with Session Expired Modal on same page.
   • In this setting we could also provide additional sub-setting with ability to enable a session expiration warning (admin can set the number of minutes)

   Incomplete Client-Side Inactivity Timeout: We have two different issues with this vulnerability,
   • If a customer steps away from their system without an automatic logout after a period of inactivity, there is… more

   6 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   Gathering Feedback  ·  3 comments  ·  Delete…  ·  Admin →
   How important is this to you?

   Nice to have You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

6. Sales rep profile + website user

   As a sales rep, I would like to be able to see my customers tied to my sales rep profile as well as customers tied to to my web users.

   Because of this I can not use my account to make purchases for myself. The only customers I see are the ones tied to my sales rep profile.

   5 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   New  ·  0 comments  ·  Delete…  ·  Admin →
   How important is this to you?

   Nice to have You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

7. Support for Cyncly as a Payment Gateway with Spreedly

   We are researching new payment gateway options and are interested in upgrading to Cyncly Payments.

   5 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   New  ·  1 comment  ·  Delete…  ·  Admin →
   How important is this to you?

   Nice to have You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

8. Enable Cloudflare's leaked credentials detection

   Please note: this idea required splitting so that various points may be addressed as information becomes available.

   New request:

   1. WAF compromised credentials check

   Original request:

   Please help with implementing below security features ASAP. There are so many frequent attacks on the website that causes the websites to go down.

   1. Geographical Rate Limiting - Add rules with rate limiting for traffic outside of specific countries (Challenge beyond the primary range/limit and block beyond the secondary range/limit)
   2. Basic Rate Limiting - Can we add a rule with rate limiting to block DoS attacks
   3. Bot Protection - Challenge suspected bots to confirm user authenticity
   4. Bot detection with javascript to identify headless browsers
   5. Captcha functionality - when users initially come into the site or users are starting an order or users are entering credit card information
   6. WAF compromised credentials check
   7. Any other WAF rules to protect the website from anonymous usage and attacks

   There are multiple problems if there are no proper security rules in place.

   • Problem-1: Websites are going down – Loss of business and sales
   • Problem-2: There are many unnoticed attacks, as we know the attacks only after the websites go down
   • Problem-3: There is a possibility of data mining from our websites if there is no security rules

   Please note: this idea required splitting so that various points may be addressed as information becomes available.

   New request:

   1. WAF compromised credentials check

   Original request:

   Please help with implementing below security features ASAP. There are so many frequent attacks on the website that causes the websites to go down.

   1. Geographical Rate Limiting - Add rules with rate limiting for traffic outside of specific countries (Challenge beyond the primary range/limit and block beyond the secondary range/limit)
   2. Basic Rate Limiting - Can we add a rule with rate limiting to block DoS attacks
   3. Bot Protection - Challenge suspected bots to confirm user… more
   5 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   New  ·  0 comments  ·  Delete…  ·  Admin →
   How important is this to you?

   Nice to have You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

9. Sales representative's user shouldn't need Customers Assigned to activate their accounts

   As an [Implementer/User admin] I want to be able to Activate Sales Representative Users without assigning them User Customers. They are assigned through the Primary Sales Rep field of the customer, not through the Users Customers assignment.
   Right now I need to add a ficticious customer to the user just to activate it, and then remove it. This is very error prone, and a security risk.
   This is specially bad in case we automate the user creation for sales reps (we intend to.

   5 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   Gathering Feedback  ·  1 comment  ·  Delete…  ·  Admin →
   How important is this to you?

   Nice to have You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

10. Pricing with promotion applied rounded to 2 decimals

    Our client wants to round the price with a promotion applied to 2 decimals, because the ERP was setup to allow only 2 decimals and they want all calculations with 2 decimals.
    For example, a customer ordered 101 EA with a price of 8.973 / EA. The total from Optimizely is 101 * 8.973 = 906.27. Even if in the screenshot you can see only 2 decimals (frontend, there are 3 when the calculation is done in backend.
    The ERP use the price 8.97, which means a total of 101 * 8.97 = 905.97. In this case, there are difference between Cart/Checkout/Order Confirmation and Order History.
    We would need the possibility to do all the calculations along the website using only 2 decimals.

    Our client wants to round the price with a promotion applied to 2 decimals, because the ERP was setup to allow only 2 decimals and they want all calculations with 2 decimals.
    For example, a customer ordered 101 EA with a price of 8.973 / EA. The total from Optimizely is 101 * 8.973 = 906.27. Even if in the screenshot you can see only 2 decimals (frontend, there are 3 when the calculation is done in backend.
    The ERP use the price 8.97, which means a total of 101 * 8.97 = 905.97. In this case, there are difference… more

    5 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    Gathering Feedback  ·  0 comments  ·  Delete…  ·  Admin →
    How important is this to you?

    Nice to have You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

11. Export option for Order and Invoice History

    Customer would like to be able to export order history and invoice history into an excel spreadsheet

    5 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    Gathering Feedback  ·  0 comments  ·  Delete…  ·  Admin →
    How important is this to you?

    Nice to have You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

12. Add General Content to Search Results

    It would be very helpful to add articles and general content on the site (anything not a product to the search index, and then display them in the search results as a new tab.
    Basically, to have another tab for the content in the search results where they can perform additional filters for the content.

    5 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    Gathering Feedback  ·  0 comments  ·  Delete…  ·  Admin →
    How important is this to you?

    Nice to have You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

13. Quote Workflows for Console and Website Users

    Configured Commerce quotes are ok at gathering a quote request, but are terrible beyond that.

    There needs to be the ability for the sales representative or for an admin console user to edit the quote. We often have regional substitutions that are functionally the same item, but we cannot make substitutions to the quote. We also cannot remove a quoted item from the quote. If we were to quote other items but not that one and Propose a quote, the customer cannot remove the unquoted item and can check out with an item with an invalid price. The sales person and the customer requesting the quote do not get notifications on messages requesting clarification. All in all this tool is not robust.

    We realize that our use case scenario is different than many as we have many products that are unpriced for some or many customers who want to use the website as a discovery tool. But even if everything was priced, I feel this change would be beneficial.

    Configured Commerce quotes are ok at gathering a quote request, but are terrible beyond that.

    There needs to be the ability for the sales representative or for an admin console user to edit the quote. We often have regional substitutions that are functionally the same item, but we cannot make substitutions to the quote. We also cannot remove a quoted item from the quote. If we were to quote other items but not that one and Propose a quote, the customer cannot remove the unquoted item and can check out with an item with an invalid price. The sales person… more

    4 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Delete…  ·  Admin →
    How important is this to you?

    Nice to have You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating
    Gathering Feedback  ·  AdminSara Winter (Principal Product Manager, Optimizely) responded

    Thank you for submitting this request!

    
    

    We have added this item to our backlog for future consideration and prioritization.

    
    

14. We need to be either notified or be able to see the Password re-set e-mails being suppressed in at Optimizely

    We need to be either notified or be able to see the Password re-set e-mails being suppressed in at Optimizely

    4 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    New  ·  3 comments  ·  Delete…  ·  Admin →
    How important is this to you?

    Nice to have You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

15. Search Boost by Product Image

    Use Case: As a Commerce Administrator, I am seeing the products with Images are more likely to sell online - and I want to boost those Products in Search.
    Request - allow me to boost Products with Images through configuration. Right now it's a manual process.

    4 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    Gathering Feedback  ·  0 comments  ·  Delete…  ·  Admin →
    How important is this to you?

    Nice to have You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

16. Dynamic Filtering: Enhancing UX on list page

    Proposed Enhancements:
    * Add a fixed top panel to display all applied filter options
    * Allow users to remove individual applied filters by clicking an "X" on the top panel
    * Replace checkboxes for filter options with visually distinct selectable buttons
    * Automatically filter relevant items as each filter option is selected or removed
    * Remove the "Apply Filter" button to make filtering immediate
    * Keep the "Clear All" hyperlink button in the top panel to reset all filters
    Benefits of Proposed Changes:
    * Improved user experience with real-time filtering
    * Increased engagement as users see instant results
    * Competitive alignment with industry standards
    * Reduce drop-o rates during product searches

    Proposed Enhancements:
    * Add a fixed top panel to display all applied filter options
    * Allow users to remove individual applied filters by clicking an "X" on the top panel
    * Replace checkboxes for filter options with visually distinct selectable buttons
    * Automatically filter relevant items as each filter option is selected or removed
    * Remove the "Apply Filter" button to make filtering immediate
    * Keep the "Clear All" hyperlink button in the top panel to reset all filters
    Benefits of Proposed Changes:
    * Improved user experience with real-time filtering
    * Increased engagement as users see instant results
    * Competitive… more

    4 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    Gathering Feedback  ·  0 comments  ·  Delete…  ·  Admin →
    How important is this to you?

    Nice to have You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

17. Category Quantities after Category Name

    I would like to see the option to show a qty amount within each category while shopping. This is available if using the search engine (screenshot below, but not through category browsing and shopping without search

    4 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    Gathering Feedback  ·  0 comments  ·  Delete…  ·  Admin →
    How important is this to you?

    Nice to have You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

18. API imports into PIM

    Requested by Ian Cooper during the PIM client conversation on 6/1/23. Liked by Ryan Pastor, Gina Pfaff, Remco van Daldin, Laura Malendez, Laura Mahoney, and Chandan Raj.

    4 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    Committed  ·  0 comments  ·  Delete…  ·  Admin →
    How important is this to you?

    Nice to have You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

19. Allow Shared Lists / Transfer Owners

    Ability to transfer a list from one user to another, or have multiple owners of a list (for when B2B User leaves company the lists shared by them are no longer 'abandoned')

    3 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Delete…  ·  Admin →
    How important is this to you?

    Nice to have You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating
    Gathering Feedback  ·  AdminSara Winter (Principal Product Manager, Optimizely) responded

    Thank you for submitting and voting for this request! We have added this item to our backlog for future consideration and prioritization.

20. Promotions - BOGO Improvement

    We are having an issue with a Buy One Get One Free Promo. 
    [It requires too many promotions to be setup to be able to support this type of promotion.]

    This promo does work when you just order 1 of the MILW 3697-22 and you get a free MILW 48-11-1865
    BUT if a customer were to order more than 1 lets say 4 for example, it's only still giving them 1 free MILW 48-11-1865 when it should give them 4 free MILW 48-11-1865, since it is a Buy one Get one.

    [Multiple promotions are required to set this up which result in potentially hundreds of promotions to support a single BOGO type campaign]

    If I were to walk into a retailer like Home Depot or Lowe’s, or place an order on their websites, I would be able to add four qualifying items and receive four batteries for free, as outlined in my example.

    With all due respect, this type of functionality is fairly common within eCommerce. It would be beneficial to see more forward-thinking development around promotional capabilities to better align with standard market expectations and customer buying behavior.

    We are having an issue with a Buy One Get One Free Promo. 
    [It requires too many promotions to be setup to be able to support this type of promotion.]

    This promo does work when you just order 1 of the MILW 3697-22 and you get a free MILW 48-11-1865
    BUT if a customer were to order more than 1 lets say 4 for example, it's only still giving them 1 free MILW 48-11-1865 when it should give them 4 free MILW 48-11-1865, since it is a Buy one Get one.

    [Multiple promotions are required to set this up which… more

    •  

    3 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    Research & Design  ·  1 comment  ·  Delete…  ·  Admin →
    How important is this to you?

    Nice to have You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating