Magento: Guides and Practical Know-how | Page 7 | mironsoft Blog
Magento
-
May 10, 2026
cron_schedule logs every scheduled and executed cron job in Magento and can accumulate millions of rows within a few weeks if misconfigured. Once you understand the table's status transitions, set history_cleanup_every correctly, and step in manually when needed, you prevent slow cron runs and locking problems in production.
-
May 9, 2026
A compromised admin password is one of the most common entry points for attackers against Magento stores, because a single factor is enough to take over payment configuration, customer data and the entire store setup. This article shows how to configure the Magento_TwoFactorAuth module, which providers are available, how to enforce Two-Factor Authentication store-wide through configuration or per role, how the underlying CLI commands work, how to implement a custom TFA provider using the ProviderInterface, how to register it through di.xml, and which pitfalls typically appear when operating 2FA behind a reverse proxy, in a headless setup or on a staging environment.
-
May 7, 2026
Solving a product gallery with pure CSS sounds like a trick, but it is a resilient pattern: scroll snap containers, the checkbox hack principle and the :target pseudo class cover thumbnail navigation, carousel and full screen view without loading a single kilobyte of JavaScript.
-
May 7, 2026
Magento cron and message queue consumers behave differently in containers than on a classic server with a host crontab. Without dedicated containers, clear locking and clean signal handling, you get duplicate jobs, hanging consumers and lost messages. This article shows how Magento cron and consumers are reliably run as standalone, monitored containers.
-
May 2, 2026
Without systematic fraud prevention, a Magento store relies on luck at checkout: address mismatches, unusual order frequencies, and card-country mismatches go unnoticed until the chargeback arrives. This article shows how a custom risk-scoring service, built as a service contract, evaluates concrete fraud signals, how suspicious orders get an order hold instead of a hard block for human review, and how external fraud detection providers such as Signifyd, Riskified, or ClearSale can be integrated cleanly via webhook, without turning away legitimate customers through false positives.
-
May 2, 2026
A poorly designed schema is hard to extend, forces breaking changes, and makes resolvers complex. The right nullability decisions, custom scalars, and correct use of interfaces and unions determine how long a GraphQL API stays viable.
-
May 2, 2026
Standard RabbitMQ setups in Magento 2 process messages reliably as long as nothing goes wrong. The moment an external service fails or a message carries corrupted data, the quality of your own message queue consumer decides between data loss and clean error handling. This article shows how to build custom consumers with idempotency checks, exponential backoff, dead letter queues and systemd-based monitoring for production use.
-
Apr 28, 2026
Maintaining a separate test copy for every language and store means losing both overview and runtime at the same time. A single store-context parameter in Cypress or Playwright is enough to check languages, currencies, and catalog differences, catching typical store-scope configuration bugs reliably before they reach production.
-
Apr 27, 2026
A custom loyalty points tab in the customer account dashboard shows exactly how to extend Magento_Customer cleanly: a layout XML addition for the sidebar navigation, a controller with proper customer authentication, a ViewModel for the data and Alpine.js for filtering and detail views without a page reload, all without copying a single core template.
-
Apr 25, 2026
The question isn't "OpenAPI or GraphQL?", it's "What is each model good for, and when does it make sense to run both in the same system?" Anyone who understands both models and their respective strengths makes better API architecture decisions.