Masthead image for SitecoreFundamentals.com
Banner image for Xdb SQL Injections Attempts Can't Do Any Harm, but They'll Still Fill Up Your Databases With Useless Records article

During routine maintenance I saw our xDB was busy, having received a couple hundred thousand new contacts in a short amount of time. Having gone through an exercise of updating the excludedUserAgents configuration, I was curious to see what I might have missed. Looking at the User Agents of the new traffic revealed something alarming, but also presented the opportunity for my next module.

Read More
Banner image for Apache-log4j-Cve-2021-44228 and How It Can Affect Your Sitecore Installation article

On December 10th, Apache announced a critical issue with their Log4J library being vulnerable to RCE (Remote Code Execution) attacks, for certain versions of Solr. They listed upgrading Solr as the preferred method for rectifying this issue, but since Sitecore's compatibility is usually closely bound to a limited number of versions, modifying your current installation would be the safest approach.

Read More
Banner image for A Complete Guide to Restricting Access to Sitecore Managed Cloud article

Sitecore Managed Cloud can be a lot of things for an organization, saving a great deal of time and expense having offloaded numerous tasks and resources. One important step that's still up to you, is restricting access to non-delivery resources. Today we're going to cover doing this, along with some automation using PowerShell.

Read More
Banner image for Replacing Your Ssl Certificate in a Standalone Sitecore Environment article

If you've read my article, Providing External Access for the Xp Single Developer Installation, you'd know there was some certificate work to be done. Well, today's the day I need to replace these certs with new ones, so let's walk through the steps together.

Read More
Banner image for Using Xconnect Without Certificates When You Really Want to Live on the Edge! article

Sometimes you don't have time to deal with problems and you've just gotta have a running instance of Sitecore. Today we had some certificate issues with xConnect that appeared out of nowhere, so after some time troubleshooting, I decided to remove the requirement, since we've already locked down network access to it. Temporary and non-Production, and in other words, nail meet hammer. 

Read More