Adobe's Isolated Patch Strategy: A Community Response
Adobe's new monthly isolated patch approach for Magento creates maintenance burden. Here's how a community meta-package can help restore sanity to security patching.
Sam James writes about a range of topics drawn from his professional experience, helping readers explore key insights, strategies, and trends in Magento, DevOps, and E-commerce Engineering.
Adobe's new monthly isolated patch approach for Magento creates maintenance burden. Here's how a community meta-package can help restore sanity to security patching.
Why I’m consolidating my blog and documentation into my main site: reducing infrastructure, improving clarity, and strengthening my personal brand and SEO.
Learn how to integrate Sansec Ecomscan into Magento 2 CI/CD pipelines to detect malware, enforce security patches, and secure build artifacts. Step-by-step guides for GitHub Actions and Bitbucket Pipelines included.
I rebuilt small projects to test AI for frontend, SEO and UI. Here’s what helped, what broke, and how I’d use it again.
Cloudflare accidentally took half the internet down for half a day, right before Black Friday. What can we learn from this, and how can we engineer more resilient infrastructure to survive similar outages in the future?
How to guide on checking if your Magento 2 store is safe from the Session Reaper (CVE-2025-54236) exploit. And guidance on how to patch and secure your site if it is not.
Production-tested DevOps, Magento, and Linux guides from 10+ years managing enterprise infrastructure. Real solutions to CI/CD, security, and performance problems.
Production DevOps documentation: CI/CD pipelines, Ansible/Terraform automation, monitoring strategies, and infrastructure deployment workflows.
Programming language guides: Python environment management, version control, virtual environments, and language-specific development tooling.
Platform documentation for Magento, Linux, Warden, and AeroCommerce: production operations, development workflows, and real-world troubleshooting.
Quick reference guides and cheatsheets: diff utilities, Composer commands, and commonly-used development workflow shortcuts.
Fluent Bit log parser collection: Fail2Ban, auth logs, and custom regex patterns for centralized log processing.
Sam is also an active contributor on Magento Stack Exchange, where he shares his expertise by answering questions and providing guidance to the community. His contributions cover a wide range of topics, including Magento development, performance optimization, security best practices, and troubleshooting complex issues.
Explained that they are disabled in the first place for security reasons, and provided a few ways to re-enable them if needed. View full Answer on StackExchange
PHPCS fixer is not supported above PHP7.2, explained options on how to install without dev dependencies, remove the package or downgrade PHP to a supported version. View full Answer on StackExchange
Explained that the issue likely stemmed from not setting the max package weight correctly, which in turn would set the max package weight to zero. View full Answer on StackExchange
Provided an example of a systemd timer and service file to run Magento cron jobs, along with instructions on how to enable and start the timer. View full Answer on StackExchange
Provided an non exhaustive list of steps to help secure a Magento 2.3 site, including using WAFs, file/IP restrictions, Scanning Tools, Integrity monitoring and more. View full Answer on StackExchange