April 15, 2014 9:23 (UTC)
At the moment the product search function is not available for up to 50% of Ecwid stores. There’s no data loss, this problem affects only the possibility to lookup products with the search function on the storefront and in the control panel on the admin side.
Our engineers are currently working on investigating the origin of this problem. We will keep you updated of the progress.
Please accept our deepest apologies for this problem. We will keep you informed on the process.
[UPDATE]April 15, 2014 9:46 (UTC) Our engineers have already located the cause of the problem and got it patched. The fix will gradually activate the product search function in all affected Ecwid stores back again. The estimated time for the complete restore of the search functionality is 6 hours. We will post an update once the issue is fixed.
[UPDATE] April 15, 2014 14:50 (UTC): The search functionality is now fully restored in all Ecwid stores.
April 14, 2014
Last week a security flaw was discovered and published to affect almost all websites using SSL encryption. The flow exists in software called OpenSSL which is installed and deployed on web-servers and is believed to be used by two-thirds of all internet sites. On Apr 7 this vulnerability was exposed to public and titled Heartbleed.
In a couple of hours after the bug had been published, we took necessary actions to protect all our servers, where Ecwid stores run, against this flaw, and then, as an extra security measure, we re-issued all our SSL certificates. So Ecwid is not affected and is safe now.
Heartbleed issue has been on top of internet posts since it was disclosed. Its impact has been widely discussed across the internet. We would like to address several points that you must know about this issue, how it affects online sales, and emphasize that all Ecwid stores are safe from this vulnerability.
What is Hearbleed?
Heartbleed is now a world known vulnerability in OpenSSL - a software library used to encrypt data in secure protocols (HTTPS). To put it simply, this bug allows retrieving sensitive information transferred via HTTPS. When you enter a website and check the browser address bar, you will see that the site address starts with “http://” or “https://”. “https” prefix, and also a yellow padlock icon in the browser, means that the site uses secure protocol which can use OpenSSL.
OpenSSL is used by major part of all websites and by such internet giants as Facebook, Google, PayPal, etc. It makes the vulnerability very serious that’s why it has its own website where it is explained in every detail: http://heartbleed.com/
There is a patch to fix this flaw, once developed it was delivered to public, and we installed it immediately on our servers.
Is Ecwid safe? Yes.
All Ecwid stores and data is safe and protected against the Heartbleed.
The Heartbleed was reported to public on April 7 on website http://heartbleed.com/ The site also posted a patch fixing this bug in OpenSSL software.
Our Operations team responded immediately and in a couple of hours we applied the fix on our servers. Next step we did right away was that we re-issued all our SSL certificates - it is an additional measure to become 100% safe from the Heartbleed.
What should I do?
We took care of the Heartbleed flaw and updated the servers on which Ecwid stores run. At this point, you don’t have to worry about the technical part - our team did all that for you and made sure it is safe to shop online in all Ecwid stores.
As noted above, Heartbleed, however, affects almost all internet and millions of websites. You can see a list of popular services that were affected, and what they suggest to their users on this website.
What is recommended at first place, as an extra precaution, is changing passwords on all sites/services/blogs/social accounts/profiles, etc. You may be getting emails from different services, that you’re using or subscribed to, prompting you to change the passwords.
We too encourage all our clients to change password to the Ecwid control panel to be 100% safe: at My Profile>Account Settings page. For those, who sign in at https://my.ecwid.com through buttons Google, Facebook, or PayPal, - you only need to change passwords to your profiles at Google, Facebook, PayPal because the authentication is done on their side.
People should change passwords regularly, it’s a good habit to keep your data safe. So it’s high time to update your passwords. Remember to choose ones that do not relate to yourself or simple. We’d recommend trying services like Lastpass or Onepassto generate and store unique and totally secure passwords.
What about my site?
If you embedded Ecwid in your website, you should mind that the site is hosted on a third-party server which may be vulnerable to the Heartbleed flow. Your Ecwid store is protected against it, yet your site may need the fix too. Therefore we strictly recommend contacting your hosting support or customer service of your site and ask them whether they applied the required fixes.
To check if your site is still affected, you can use this Heartbleed test.
Results of the Hearbleed test for Ecwid services:
http://filippo.io/Heartbleed/#app.ecwid.com
http://filippo.io/Heartbleed/#www.ecwid.com
http://filippo.io/Heartbleed/#my.ecwid.com
To sum it up
Ecwid is updated and safe from the Heartbleed bug. Our team did the technical part and fixed the servers, where Ecwid shops are functioning, the same day the Heartbleed was disclosed (in a couple of hours after the flaw was published). The update went smoothly, your storefronts were and continue displaying and working as usual.
To be 100% safe, you should change the passwords for the Ecwid control panel as well as all the sites and services you’re using.
We also suggest installing this Chrome extension that will check whether the site you’re browsing is affected by the Heartbleed.
Apr 2, 2014 13:15 (UTC)
We are sorry to inform you that one of Ecwid servers is experiencing technical issues at the moment. This causes sporadical unavailability of storefront and back-end for up to 8% of our users.
Our techs are working on investigating origin of this issue and restoring the service.
Please accept our sincere apologies for the trouble. We will keep you informed on the progress.
[UPDATE] Apr 2, 2014 13:31 (UTC) The problem has been resolved and the service is fully functional again for all Ecwid stores.
[UPDATE] Apr 2, 2014 14:27 (UTC) We are now making proactive changes in our infrastructure to prevent this problem from occurring in future. This may result in momentary unavailability of storefronts and Ecwid control panel.
[UPDATE] Apr 2, 2014 14:31 (UTC) The changes have been applied. There were no interruptions for users during this process.
April 1, 2014 20:28 (UTC)
We are sorry to inform that the product search function is currently not available for up to 50% of Ecwid shops. There’s no data loss, this problem affects only the possibility to lookup products with the search function on the storefront and in the back-end.
Our techs are currently working on investigating the origin of this problem and developing a fix for it.
Please accept our deepest apologies for this problem. We will keep you informed on the process.
[UPDATE] April 1, 2014 21:24 (UTC): we have located the cause of the problem and got it patched. This fix will gradually activate the product search function in all affected Ecwid stores back again and will complete in 3 to 6 hours. We will post an update once this process finishes.
[UPDATE] April 2, 2014 02:20 (UTC): The fix has been applied to all stores and the service is fully restored now.
This post is about mobile catalog that is setup at Ecwid control panel>System Settings>General>Mobile Version. It does NOT anyhow impact Ecwid storefronts on your websites, blogs or Facebook pages.
We are sorry to inform you, the mobile catalog is having an issue with displaying categories and products pages: if to click on a category or a product link, there may be an internal server error.
We are already fixing this issue and will be adding the fix urgently. We will post updates here.
Again we assure you that your Ecwid storefronts continue functioning as usual, all your data is safe and sound.
The issue affects the mobile catalog designed for old phones with no Javascript support. Ecwid responsive design for modern mobile devices (iPhones, iPads, those that are based on Android platform and all other devices that do support Javascript) is working.
If you are using the mobile catalog as your mobile store version, we urge you to switch to the use of your simple store link (how to get it).
UPDATE, March 31, 18:30 UTC:
The issue has been fixed. The mobile catalog pages are now displayed and working.
Mar 27, 2014 13.05 (UTC)We are very sorry to inform you that some of Ecwid servers is having problems right now. This causes unavailability for our users: the storefronts and control panels are not loading.
Our techs are working on restoring the service at this very moment. We will publish update as soon as we have further details on this issue.
Please accept our deepest apologies for this downtime. We will keep you informed on the progress.
UPDATE Mar 27, 2014 13.15 (UTC): we have restored the service for all Ecwid accounts and continue the investigation for the reasons of this problem.
Mar 25, 2014 19.01 (UTC)
We are very sorry to inform you that one of Ecwid servers is having problems right now. This causes unavailability for about 10% of our users: for those stores the storefronts and control panels are not loading.
Our techs are working on restoring the service and we will publish an update as soon as we have further details on this issue.
Please accept our deepest apologies for this downtime. We will keep you informed on the progress.
[UPDATE] Mar 25, 2014 19.11 (UTC) The service is restored. We are now working on investigating the origin of this issue further to prevent the problem from occurring in future.
Mar 23, 2014 07:00 (UTC)
Ecwid application for adding shop widgets to VKontakte (a popular Russian social network) is currently unavailable. We are investigating the exact reason of this issue with VKontakte. The issue affects only merchants who use our official Ecwid app in VKontakte. All storefronts on other platforms work as usual. If you integrated your store with VKontakte using a custom app, this it is also not affected.
The message and the updates below are in Russian.
23 марта, 11:00 (время московское):
Сегодня ВКонтакте заблокировали наше официальное приложение. На данный момент витрины магазинов, использующие наше официальное приложение ВКонтакте, не доступны и показывают ошибку “Приложение Магазин заблокировано администрацией сайта”. Проблема касается только витрин ВКонтакте, использующих официальное приложение. Сами магазины, их панели управления и витрины на любых других платформах работают в нормальном режиме. На стороне Эквида никаких неполадок нет, все ваши данные в целости вне зависимости от того, используете вы наше официальное приложение ВКонтакте или нет. Кроме того, если вы используете не официальное приложение, а стороннее или сделанное вами - проблема его не коснется.
На данный момент для того, чтобы сделать свой магазин доступным для покупателей, предлагаем разместить у себя в группе ВКонтакте ссылку на работающую витрину (например, на сайт или блог, где у вас установлен тот же Эквид-магазин). Если ВКонтакте у вас - единственная витрина, тогда в качестве альтернативной ссылки можно использовать так называемую simple-store версию вашего магазина, которая размещена у нас и никак не затронута проблемой с официальным приложением ВКонтакте. Там ваши покупатели смогут добавить товары в корзину и оформить заказ как обычно. Как получить такую ссылку написано вот тут: http://goo.gl/rvUz3
В данный момент мы выясняем причины блокировки. Обновления по проблеме мы будем писать здесь и на нашем форуме. Мы будем держать вас в курсе.
Обновлено. Март 24, 12:00 (московское время):
ВКонтакте пока не предоставили информации по причинам блокировки, к сожалению. Мы продолжаем решать этот вопрос в срочном порядке.
Напоминаем, что все данные ваших магазинов сохранены и доступны в панели управления Ecwid. Как только ВКонтакте снимут блокировку, ваши витрины в группах ВКонтакте продолжать работать как обычно. Также проблема не затрагивает другие витрины: на сайтах, блогах, в Facebook.
Мы будем сообщать о новостях.
Обновлено. Март 24, 13:00 (московское время):
ВКонтакте сообщили о причине блокировки: один из магазинов продавал метариал, запрещенный правилами Вконтакте. К сожалению, ВКонтакте не стали разбираться и проверять - отключили всё приложение. Мы продолжаем общаться с администрацией Вконтакте, чтобы выяснить подробности и данные по магазину.
Также мы написали по нескольким каналам связи, чтобы ускорить решение вопроса.
Мы продолжим держать вас в курсе.
Обновлено. Март 25, 10:00 (московское время):
Вконтакте пока не дали данных по заблокированному магазину. Мы сделали запрос на разблокировку приложения. Но Вконтакте рассматривает такие запросы некоторое время. Поэтому пока, к сожалению, точных сроков у нас нет. Мы будем сообщать о новостях.
Обновлено. Март 25, 13:30 (московское время):
Ecwid приложение для Vkontakte разблокировано. Все витрины, которые используют наше официальное приложение, сейчас должны открываться и продолжают работать как обычно.
Мы еще раз извиняемся за проблему.
We are very sorry, one of Ecwid servers was having issues as of today, March 8. It caused the Ecwid control panel to be inaccessible for some of Ecwid users.
We have restored the service and fixed the problem. The control panel is now open and working for all.
Please accept our apologies for this downtime. This issue did not anyhow impact Ecwid shops or data. The storefronts continued and is now functioning as usual, all information on orders, customers, etc, are kept intact.
We are sorry to inform you, at this moment we are having issues with display of Facebook storefronts. When you open your Ecwid shop at your Facebook page, you may see blank content.
We are already fixing this problem at the highest priority. We presume the problem is on Facebook side and are doing profound research to find a fix.
The issue is only with the display of Facebook storefront and does not anyhow impact your store data. It is all safe and secure, you can check your Ecwid control panel.
Your other storefronts, if you run any on websites or blogs, continue working as usual.
As a temporary solution, please try using Ecwid on your website, or if you don’t have a site - your simple store link (how to get it).
Will keep you posted on the progress here.
UPDATE, Feb 28, 9:45 AM UTC: We have localized the cause of the problem and are working on the fix.
UPDATE, Feb 28, 10:30 AM UTC:
Still working.
Further research has revealed that the problem is within Facebook, reported here:
https://developers.facebook.com/x/bugs/227236934134017/
Our team is working on the fix for Ecwid. We expect to apply it in around 30 minutes.
UPDATE, Feb 28, 10:50 AM UTC:
The problem has been fixed.
It is proved to be caused by Facebook failure: https://developers.facebook.com/x/bugs/227236934134017/
We have found a workaround for Ecwid. Now all Ecwid stores on Facebook are up and running.
We are sorry again for the troubles.
