2018.1 Release 20 (2018.1.1620+)

Bug Fixes (2018.1.1620+)

• Fixed issue where scheduled import failing under certain circumstances
• Fixed issue where changing order to credit declined status removes inventory
• Removed colon on order custom field labels at checkout
• Fixed issue where scheduled exports not in temp dir under certain circumstances
• Blog links on profile page now use relative links, instead of hardcoded with http
• Fixed issue where browser autofill address changes could allow customer to place order with rate not available after address change
• Facebook scripts populated by "like" merge code on blog pages now uses https url
• Tax Amount changes correctly when overriding shipping on order edit
• Resolved application error caused by DB lock when changing order status in admin under certain circumstances
• Fixed internal MiniProfiler to help better troubleshoot site-specific performance issues

AmeriCommerce Admin Dashboard Improvements

• Added a store option for scheduled import and export
• Ability to upload cert and private key for custom SSL for cloudflare
• Wire up page for in app ssl purchase to new ssl page
• Go Live & SSL pages styling tweaks

Infrastructure Improvements

• Imrproved handling of reverting to AC Shared SSL
• Stood up new application server: WEB40
• Migrated several sites from several application servers to new, optimized application servers
• Hardened site update routines
• Automated free trial to full site conversion for for rapid go-lives
• Added automatic application recycle when certain down events detected
• Populated Shared SSL Domain on Older Sites
• Extended Nightly Recycles Across Broader Time Window
• Migrated .mysparkpay sites with no custom domains to .americommerce

Annual PCI Compliance Tasks and Security Checks

• Verified Password Management & Expiry for Merchants
• Validated Data Retention
• Reviewed Logs To Ensure No CVC Is Stored
• Reviewed Change Management Process
• Validated Secure Code Review
• Validated IT Change control procedures
• Reviewed Central logging to ensure completeness
• Reviewed and Test Incident Response Plan
• Reviewed Penetration Testing Methodology