nopCommerce Performance Optimization and Security Tips

www. t echnos cor e. com i nf o@t echnos cor e. com

nopCommer ce Per f or manceOpt i mi z at i on AndSecur i t yTi ps

© Copyr i ght2018,Al lRi ght sRes er vedwi t hTechnoScor e. com

01 A.Secur i t yonecommer cePl at f or m.

1.Us eat r us t edpl at f or m.

Whenus er spl ac et r us ti nbuyi ngf r om yours t or eands har i ngs ens i t i ve i nf or mat i onl i kec r edi t /debi tc ar dc r edent i al s ,ens ur i ngi t ss af et ys houl dbe yourt oppr i or i t y.Anyc ar el es s nes si nt hi sr egar dc anc os tyouagr eatdeal .

Wi t hPCIc ompl i anc eofnopCommer c e,ens ur i ngs af et yi smuc heas i er .

However ,t her ear eanumberofpr ec aut i onst hatonec anf ol l ow t of ur t her mai nt ai ns ec ur i t y.

www. t echnos cor e. com | i nf o@t echnos cor e. com Š Copyr i ght2018,Al lRi ght sRes er vedwi t hTechnoScor e. com

02 2.Donots t or es ens i t i vei nf or mat i on.

Thankf ul l y,nopCommer c ei sc ompat i bl ewi t ht hel at es ti ndus t r ys t andar df or paymentdat apr ot ec t i on,PCIDSS3.

2offer i nganumberofgr eatf eat ur esl i ke: Nons t or ageofCr edi tc ar di nf or mat i oni nt odat abas eac c or di ngt oPADSS. ( PaymentAppl i c at i onDat aSec ur i t ySt andar d) Us i ngpr i vat ekeyenc r ypt i ont os t or es ens i t i vedat a.

www. t echnos cor e. com | i nf o@t echnos cor e. com © Copyr i ght2018,Al lRi ght sRes er vedwi t hTechnoScor e. com

03 3.Forcol l ect i ngpr i vat ei nf or mat i on,makeSSL yourpr i meconcer n NopCommer c eal l owsyout oeas i l yc onfigur eSSLs et t i ngsonyours t or es i t eby s i mpl ygoi ngi nt os t or edet ai l spageandenabl i ngt heopt i on.I naddi t i ont ot hi s , youc an: Exec ut eSSLonal ls i t epages .

Enabl eXSRFpr ot ec t i onf oradmi nar ea.

Enabl eXSRFpr ot ec t i onf orpubl i cs t or e.

www. t echnos cor e. com | i nf o@t echnos cor e. com © Copyr i ght2018,Al lRi ght sRes er vedwi t hTechnoScor e. com

04 B.Per f or mancef orecommer ce.

(Ti ps ,Set t i ngs&Rec ommendat i onst o Opt i mi z ePer f or manc ei nnopCommer ce) Whi l eopt i mi z i ngawebs i t e,i mpr ovi ngper f or manc ei soneoft hemos tc r uc i al andc hal l engi ngkeyar ea.Ac c or di ngt oHubs pot Mor et han40% ofbuyer s abandonas i t et hatt akesmor et han3s ec ondst ol oad.

Wehavec l ubbedaf ew bes tpr ac t i c est hatai di ni mpr ovi ngyournopCommer c e webs i t es c al i ngona pr i vat ehos t edenvi r onment .

www. t echnos cor e. com | i nf o@t echnos cor e. com Š Copyr i ght2018,Al lRi ght sRes er vedwi t hTechnoScor e. com

05 1.Res our ces-Tof aci l i t at eanenhancedwebs i t e per f or mance,yous houl dal waysgof ort hi ngst hat s uppor thi gherI Os uchas Di s ks pac e.

Di s kt ype( r ec ommendedSSD/ flas hbas eddi s k) .

RAM ( hi ghs peed) .

CPU( anext r aCPUf orbet t err es ul t s ) .

www. t echnos cor e. com | i nf o@t echnos cor e. com © Copyr i ght2018,Al lRi ght sRes er vedwi t hTechnoScor e. com

06 2.Dat abas e( MSSQLSERVER) .

KeepyourMSSQLSERVERonas epar at ededi c at eds er ver .

Fors mal lwebs i t eyouc ani ns t al lani ns t anc eofSQLSer veronac omput er t hati sr unni ngI I S. RAM ( hi ghs peed) .

Yous houl dal waysus eanupdat edver s i onandappl ypat c hes / fixesand s er vi c epac ks .

Yous houl dmoni t oryourMSSQLSERVERandupdat e/ addmi s s i ng i ndexes .

www. t echnos cor e. com | i nf o@t echnos cor e. com © Copyr i ght2018,Al lRi ght sRes er vedwi t hTechnoScor e. com

07 Al s o,youneedt oens ur et hatyourc onnec t i ons t r i nghas “ Mul t i pl eAc t i veRes ul t Set s =Tr ue”t oal l ow Ent i t yFr amewor kt omake mul t i pl er eques t st oMSSQLSERVERoveras i ngl ec onnec t i on,r educ i ngt he numberofr oundt r i ps .

I nt er msofdi s ks pac e,i tbec omesi mpor t antt oTr ac kt r ans ac t i onall ogfil egr owt h.

Chec kSi z e&f r ees pac ei nadat afil e.

Dr i ves pac e( asagener alr ul eoft humb,i ts houl dhave atl eas t10% f r ees pac e)

www. t echnos cor e. com | i nf o@t echnos cor e. com © Copyr i ght2018,Al lRi ght sRes er vedwi t hTechnoScor e. com

08 3.I I SPer f or mance-I I Spl aysani mpor t antr ol ei n yourwebs i t eper f or mance.Wehaveanumberof r ecommendat i onsf oryourI I Shos t i ngs er ver Yous houl dal waysus eadedi c at edappl i c at i onpoolf oreac hwebs i t e.

Us e32bi tappl i c at i onpool s( per f or manc eandmemor yc ons umpt i onar e al s obet t ert henNat i ve64bi t ) .

www. t echnos cor e. com | i nf o@t echnos cor e. com Š Copyr i ght2018,Al lRi ght sRes er vedwi t hTechnoScor e. com

09 Configur er ec yc l i ngi napr operway. i dl et i meout( mi nut es ) :0 Regul art i mei nt er val( mi nut es ) :0 Spec i fict i mes :s ett ol eas tus edt i meoft heday.

Donots etanymemor yl i mi tunl es st r oubl es hoot i ngs pec i fics c enar i os .

Donotus eWebGar denunt i lyouknow whatyou’ r edoi ng.

Ens ur et hatASPdebuggi ngi sdi s abl edi nI I S. Us es t at i canddynami cc ompr es s i on( SetCompr es s i onLevelt o4,and exc l udefil esl i keJ PEG,PDFt hatar eal r eadyc ompr es s ed) .

www. t echnos cor e. com | i nf o@t echnos cor e. com © Copyr i ght2018,Al lRi ght sRes er vedwi t hTechnoScor e. com

10 4.Thel as tandoneoft hemos teffect i vewaysf or opt i mi z i ngnopCommer ces t or eper f or mancewe’ l l t ouchuponi s -“ NopCommer ces et t i ngs ” Configur i ngnopCommer c ei nt hebes tpos s i bl ewaybymani pul at i ngi t s s et t i ngsc anhel pyouagr eatdeal .Letusgi veyouaqui c kvi ew ofwhat pr ac t i c esyous houl df ol l ow.

Us et hemos tupadat edver s i onofnopCommer c e.

www. t echnos cor e. com | i nf o@t echnos cor e. com © Copyr i ght2018,Al lRi ght sRes er vedwi t hTechnoScor e. com

11 Whi l epubl i s hi ngonpr oduc t i ons er ver ,keepaf ew t hi ngsi nmi ndMakes ur et hatDebugi ss ett oFal s ei nweb. c onfig.

Enabl eHTTPCompr es s i on.Exec ut edynami cands t at i cc ompr es s i ononI I S t or educ eyourbandwi dt honr eques t s( fil ec ompr es s i on) .

Enabl eBr ows erCac hi ng.Notonl yt hi s ,yous houl dal s oi ns t r uc tt he br ows eronhow t oc ac het hec ont ent ,andf orhow l ong( s et t i ngupexpi r y header s ) .

www. t echnos cor e. com | i nf o@t echnos cor e. com © Copyr i ght2018,Al lRi ght sRes er vedwi t hTechnoScor e. com

12 Now l etuss eehow Commons et t i ngsr emai nunder s t at edandc anbe us eds mar t l y.

Toboos tper f or manc e,yous houl dr emoveunus edl anguage,s t or es , c ur r enc i es ,pl ugi nsandt hemes .

Enabl ebundl i ng&mi ni ďŹ c at i on( J S&CSS) .

Loadal ll oc al er es our c esons t ar t up.However ,t hi sr equi r esmor e memor yandi snotr ec ommendedwhenyouhaveal ar gec at al ogor t hous andsofent i t i es .

www. t echnos cor e. com | i nf o@t echnos cor e. com Š Copyr i ght2018,Al lRi ght sRes er vedwi t hTechnoScor e. com

13 I nc as eyouar enotus i ngi t ,youc anI gnor es i t ewi deACLr ul es .

I gnor es i t ewi de" l i mi tpers t or e"r ul es .

I gnor es i t ewi dedi s c ount s .

Cac hepr oduc tpr i c es( onl yi nc as ei fyourpr i c esar ec ons t ant ) .

I fyou’ r es endi ngemai li nhi ghvol ume,yous houl dus eext er nal l yhos t ed Emai lSer ver s .

I nc as ei ti snotr equi r ed,youc andi s abl es t or el as tvi s i t edpage.

www. t echnos cor e. com | i nf o@t echnos cor e. com Š Copyr i ght2018,Al lRi ght sRes er vedwi t hTechnoScor e. com

14 Now wec omet oMedi aSet t i ngs .

Keepani mages i z et hatyouac t ual l yus ei nyourt heme I fyourc at al oguei ss mal l er ,keepi magesi nt hedat abas eonl y Forac ompar at i vel yl ar gerc at al ogue,keepi magesi nt heďŹ l es ys t em r at hert hans t or i ngi nt hedat abas e Setdef aul ti magequal i t ywi s el y

www. t echnos cor e. com | i nf o@t echnos cor e. com Š Copyr i ght2018,Al lRi ght sRes er vedwi t hTechnoScor e. com

15 Mai nt enance–I nor dert oaddt ot heper f or manc eofyours t or e,you s houl dpaydueemphas i sonmai nt enanc e.Af ew s ugges t i onsmi ghts er ve t obeus ef ul Del et egues tc us t omer sandt hei rc ar t satr egul ari nt er val sus i ng Sc hedul edTas ksi nnopCommer c e.

I nc as eyouar enotus i ngabandonedc ar t s ,del et et hem. ( Mai nt enanc e underSys t em i nnopCommer c eadmi nmenu) .

Del et eol dexpor t edfil es( Mai nt enanc eunderSys t em i nnopCommer c e admi nmenu) .

Enabl ec l earl ogsus i ngSc hedul edTas ksi nnopCommer c e.

Moni t orl ogs ,fixer r or s .

Addmi s s edr es our c es t r i ngs .

Moni t ort heemai lqueue. www. t echnos cor e. com | i nf o@t echnos cor e. com © Copyr i ght2018,Al lRi ght sRes er vedwi t hTechnoScor e. com

16 I naddi t i ont ot hes e,t her ear eac oupl eoft hi ngst hats houl dbef ol l owed f ornopCommer c eper f or manc eopt i mi z at i on.

Us i ngCDNt odel i verc ont ent sf as t er .

Configur i ngant i vi r usappl i c at i onst oexc l ude: Cont entf ol der s .

Tempor ar yASP. NETfil esf ol der ( C: \ Wi ndows \ Fr amewor k[ 64] \ vX. X. XXXXX\ ) Anyt empf ol der si fus ed.

Maki ngs ur eyours er verhasenoughbandwi dt h.

Mos ti mpor t ant l y,don’ tl etyourwebs i t ec r as hr epeat edl ybyunexpec t ed t r affic .Pl anf ormaj ort r affics pi kest oens ur et hatyours i t ec anhandl et he l oad.

www. t echnos cor e. com | i nf o@t echnos cor e. com © Copyr i ght2018,Al lRi ght sRes er vedwi t hTechnoScor e. com

17 Cont actus

i nf o@t echnos cor e. com www. t echnos cor e. com

www. t echnos cor e. com | i nf o@t echnos cor e. com © Copyr i ght2018,Al lRi ght sRes er vedwi t hTechnoScor e. com