YOORshop journal

Latest news

Technical information, product updates and communications about our services and infrastructure.

Security reinforcement : user agent

On the night of October 19, we have set up blocking traffic whose user agent is empty, as this is most spam traffic, hacking attempts, etc ....https://fr.wikipedia.org/wiki/User-Agent This can cause some problems at some scripts modules that do not have too much attention to the standards or are a bit old. Either you change the code much easier OR, you must change the profile to avoid this Nginx protection :http : Custom med proxy to httphttps : Custom med proxy to httpshttps://support.yoorshop.hosting/knowledgebase/2549/How-to-update-Nginx-profile.html UPDATE 26 october 2016This filter has caused various problems to some users, we reduce its perimeter, then no more need to change nginx profile

Problems with Chrome with Windows 10

We see from 48h anomalies that are related to the latest version of Chrome Version 54.0.2840.71 m (64-bit) on Windows :

- random slowness of sites in relation with js loading
- Bugs typing on keyboard

PrestaShop : disable the cache js

What drug did they took ? :)

SSD price evolution

We follow very closely the evolution of prices of SSDs in the data center version and also increasing capacity, and the fact is that it will have to wait one year to be able to offer 100% SSD servers on the shared hosting range without touching our sales prices, but we will have to remove unlimited disk space feature probably, or reinforce our TOS...Prices are falling too slowly because users do not hurry to regenerate their devices...The SSD is undoubtedly very efficient as we talk about servers or PC ... Actually accessible : 3.8 To SSD Samsung PM863 SATA3 6Gbpshttp://www.samsung.com/uk/business/business-products/datacentre-ssd/pm863/MZ-7LM3T8E In terms of consumer SSD, here's an article on the evolution of prices :http://www.kitguru.net/components/ssd-drives/anton-shilov/sandisk-to-release-8tb-ssd-in-2015-16tb-ssd-a-year-after/

Impact of loading speed of your site on its revenues and SEO

Here are now few articles that demonstrate how important is the loading speed for your site based on an optimized website (therefore upstream too : a performant hosting service) :https://tribes.no/2013/10/28/how-website-speeds-affects-online-sales https://blog.kissmetrics.com/loading-timeRead carefully one of these 2 articles to understand how to properly test a website and get to know how simulate the reality of a visitor's experience :https://support.yoorshop.hosting/knowledgebase/954/How-to-optimize-loading-speed-of-Prestashop-.htmlhttps://support.yoorshop.hosting/knowledgebase/1049/How-to-optimize-loading-speed-of-WordPress-.htmlMany people mistakenly think that the IP localization of the server counts enormously, well it is pretty false because this criterion is only ranked 142/200...- extension of your domain by targeted country plays a major role, rank is 10/200- loading speed of your website, rank is 23/200 (a server located at less than 5000 km is enough for a good speed)- presence of SSL certificate, position is 71/200 Ref : https://backlinko.com/google-ranking-factors

Update PHP 56 and PHP7

alt-php56-5.6.27-1 (core) 73025: Heap Buffer Overflow in virtual_popen of zend_virtual_cwd.c; (core) 73058: crypt broken when salt is 'too' long; (core) 72703: Out of bounds global memory read in BF_crypt triggered by password_verify; (core) 73189: Memcpy negative size parameter php_resolve_path; (core) 73147: Use After Free in unserialize(); (bcmath) 73190: memcpy negative parameter _bc_new_num_ex; (dom) 73150: missing NULL check in dom_document_save_html; (ereg) [73284|https://bugs.php.net/73150}: heap overflow in php_ereg_replace function; (filter) 72972: Bad filter for the flags FILTER_FLAG_NO_RES_RANGE and FILTER_FLAG_NO_PRIV_RANGE; (filter) 67167: Wrong return value from FILTER_VALIDATE_BOOLEAN, FILTER_NULL_ON_FAILURE; (filter) 73054: default option ignored when object passed to int filter; (gd) 67325: imagetruecolortopalette: white is duplicated in palette; (gd) 50194: imagettftext broken on transparent background w/o alphablending; (gd) 73003: Integer Overflow in gdImageWebpCtx of gd_webp.c; (gd) 53504: imagettfbbox gives incorrect values for bounding box; (gd) 73157: imagegd2() ignores 3rd param if 4 are given; (gd) 73155: imagegd2() writes wrong chunk sizes on boundaries; (gd) 73159: imagegd2(): unrecognized formats may result in corrupted files; (gd) 73161: imagecreatefromgd2() may leak memory; (intl) 73218: add mitigation for ICU int overflow; (imap) 73208: integer overflow in imap_8bit caused heap corruption; (mbstring) 72994: mbc_to_code() out of bounds read; (mbstring) 66964: mb_convert_variables() cannot detect recursion; (mbstring) 72992: mbstring.internal_encoding doesn't inherit default_charset; (mbstring) 73082: string length overflow in mb_encode_* function; (pcre) 73174: heap overflow in php_pcre_replace_impl; (opcache) 72590: Opcache restart with kill_all_lockers does not work; (openssl) 73072: Invalid path SNI_server_certs causes segfault; (openssl) 73275: crash in openssl_encrypt function; (openssl) 73276: crash in openssl_random_pseudo_bytes function; (session): 68015: Session does not report invalid uid for files save handler; (session): 73100: session_destroy null dereference in ps_files_path_create; (simplexml) 73293: NULL pointer dereference in SimpleXMLElement::asXML(); (spl) 73073: CachingIterator null dereference when convert to string; (standard) 73240: Write out of bounds at number_format; (standard) 73017: memory corruption in wordwrap function; (stream) 73069: readfile() mangles files larger than 2G; (zip) 70752: Depacking with wrong password leaves 0 length files. alt-php70-7.0.12-1 #73025 : (core) Heap Buffer Overflow in virtual_popen of zend_virtual_cwd.c; #72703 : (core) Out of bounds global memory read in BF_crypt triggered by password_verify; #73058 : (core) crypt broken when salt is 'too' long; #69579 : (core) Invalid free in extension trait; #73156 : (core) segfault on undefined function; #73163 : (core) PHP hangs if error handler throws while accessing undef const in default value; #73172 : (core) parse error: Invalid numeric literal; #73240 : (core) Write out of bounds at number_format; #73147 : (core) Use After Free in PHP7 unserialize(); #73189 : (core) Memcpy negative size parameter php_resolve_path; #73190 : (bcmath) memcpy negative parameter _bc_new_num_ex; #73126 : (com) Cannot pass parameter 1 by reference; #73091 : (date) Unserializing DateInterval object may lead to __toString invocation; #73150 : (dom) missing NULL check in dom_document_save_html; #72972 : (filter) Bad filter for the flags FILTER_FLAG_NO_RES_RANGE and FILTER_FLAG_NO_PRIV_RANGE; #73054 : (filter) default option ignored when object passed to int filter; #67325 : (gd) imagetruecolortopalette: white is duplicated in palette; #50194 : (gd) imagettftext broken on transparent background w/o alphablending; #73003 : (gd) Integer Overflow in gdImageWebpCtx of gd_webp.c; #53504 : (gd) imagettfbbox gives incorrect values for bounding box; #73157 : (gd) imagegd2() ignores 3rd param if 4 are given; #73155 : (gd) imagegd2() writes wrong chunk sizes on boundaries; #73159 : (gd) imagegd2(): unrecognized formats may result in corrupted files; #73161 : (gd) imagecreatefromgd2() may leak memory; #73218 : (intl) add mitigation for ICU int overflow; #66797 : (mbstring) mb_substr only takes 32-bit signed integer; #66964 : (mbstring) mb_convert_variables() cannot detect recursion; #72992 : (mbstring) mbstring.internal_encoding doesn't inherit default_charset; #72489 : (mysqlnd) PHP Crashes When Modifying Array Containing MySQLi Result Data; #72982 : (opcache) Memory leak in zend_accel_blacklist_update_regexp() function; #73072 : (openssl) Invalid path SNI_server_certs causes segfault; #73276 : (openssl) crash in openssl_random_pseudo_bytes function; #73275 : (openssl) crash in openssl_encrypt function; #73121 : (pcre) Bundled PCRE doesn't compile because JIT isn't supported on s390; #73174 : (pcre) heap overflow in php_pcre_replace_impl; #72414 : (pdo_dblib) Never quote values as raw binary data; (pdo_dblib) Allow \PDO::setAttribute() to set query timeouts; (pdo_dblib) Handle SQLDECIMAL/SQLNUMERIC types, which are used by later TDS versions; (pdo_dblib) Add common PDO test suite; (pdo_dblib) Free error and message strings when cleaning up PDO instances; (pdo_dblib) Fixed bug #67130 (\PDOStatement::nextRowset() should succeed when all rows in current rowset haven't been fetched; (pdo_dblib) Ignore potentially misleading dberr values; #72996 : (phpdbg) phpdbg_prompt.c undefined reference to DL_LOAD; (phpdbg) Fixed next command not stopping when leaving function; #68015 : (session) Session does not report invalid uid for files save handler; #73100 : (session) session_destroy null dereference in ps_files_path_create; #73293 : (simplexml) NULL pointer dereference in SimpleXMLElement::asXML(); #71711 : (soap) Soap Server Member variables reference bug; #71996 : (soap) Using references in arrays doesn't work like expected; #73257 : (spl) Fixed bug #73258 (SplObjectStorage unserialize allows use of non-object as key; #70752 : (zip) Depacking with wrong password leaves 0 length files; updated bundled SQLite3 to 3.14.2.

Selection of new scripts in Softaculous

We create dedicated pages for those we find interesting (there is so much) : https://www.yoorshop.hosting/en/323/web-hosting-PmWiki-softaculous.html https://www.yoorshop.hosting/en/324/web-hosting-Kopage-softaculous.htmlhttps://www.yoorshop.hosting/en/325/web-hosting-Pagekit-softaculous.html Kimai 1.1.0GNU social 1.1.3Unclassified NewsBoardChevereto 2.6.0Reader Self 3.5.4Vue.js 1.0.26SOPlanning 1.37New Branch Elgg 2.1.1Wolf CMS 0.8.3.1Zenbership 107HumHub 1.0.1Koken 0.22.2HTMLy 2.7.4RainLoop Webmail 1.9.4.402PopojiCMS 1.3Open Business Card 1.4.1Logic Invoice 1.0.1Rukovoditel 1.6.1Bugs 1.5GRAV 1.0.8DropzoneJs 4.2.0ZenTao 8.0ElkArte 1.0.6TestLink 1.9.14Agora-Project 2.17.5.1Bludit 0.7.2LuxCal 4.3.0M Precurio 4.3WebCollab 3.44Faveo Helpdesk 1.0.3.4YetiForce CRM 2.3.49Open Monograph Press 1.1.1.1Lychee 3.0.7BlaB 7.3Ampache 3.8.0Burden 3.0gpEasy 4.5appRain 4.0.2PEEL SHOPPING 7.2.1AJAX Chat 0.8.7osCmax 2.5.4InvoicePlane 1.4.3my little forum 2.3.4SurfShopCART 2.1Mautic 1.0.2Beehive 1.4.4u-Auctions 5.3.6Family Connections 3.5.0FlatPress Package to 1.0.2SLiMS Package to 7XMS Package to 4.2Prosper202 Package to 1.8.10EspoCRM Package to 2.6.0