Setting the Secure Flag So, a Sitecore site I've been working on recently underwent a penetration test, which turned up an interesting item. The ASP.NET_SessionId and SC_ANALYTICS_GLOBAL_COOKIE cookies aren't set with the 'Secure' flag.  Furthermore, my own checking showed that the .ASPXAUTH token was also set without the 'Secure' flag.As the entire site is only served over HTTPS, this seems to be a bit remiss.Fortunately, there are a couple of easy fixes to this that can be set in the Web.configUnder and set requireSSL:And ...

It’s always exciting when a new version of Sitecore arrives because it usually means bigger and better functionality for us marketers. Our CTO, Bryan Archer, has taken some time to point out some of the more substantial changes that could help marketers improve their performance. Let’s start with the experience editor because there have been a number of changes that ultimately result in a more fluent editing experience. Experience Editor ImprovementsIf you’re using the experience editor, check the “Associated content” checkbox. ...

I was really impressed with what we were able to achieve in a recent project by simply leveraging the facets functionality of the Sitecore Lucene and SOLR integration. We used this functionality to produce a list of search filters, just like the ones seen on most e-commerce websites. While performing a search within the content search you are able to call the .FacetOn() method, the first property for this method is the index field you wish to facet on, you do this via a simple LINQ link expression: (x => x.PropertyName).  The second ...

Recently I've been looking at implementing caches in Sitecore, and in my current project I've had to do this a few times; let's have a look at my general pattern. I've just been caching strings; although other objects can be cached, mostly all I need are strings or, sometimes a few IDs.First, I defined my cache class:public class MyCache : CustomCache{public MyCache() : base("Example.MyCache", StringUtil.ParseSizeString(Settings.GetSetting("Example.Cache.Settings.Size", "20MB"))){Sitecore.Events.Event.Subscribe("publish:end", ...

For many organisations, the days of direct mail campaigns are a distant memory. The relatively expensive and comparatively slow method of communication is considered to be so outdated that, to some, even the term itself is enough to cause a cringe.When email was introduced, it quickly because the fastest and most cost effective method of communicating with prospects, and whilst every organisation uses email, not every company has completely thrown the towel in on their postal efforts…and rightly so!A large number of organisations are ...

The base result item for the Sitecore content search is called SearchResultItem and is located with the Sitecore.ContentSearch.SearchTypes namespace, this by default has quite a fair few useful properties attached to it out of the box such as:1) TemplateName2) TemplateId3) Content4) Language5) PathsThe properties above are available for use within queries against the index to refine your result, you can read more on writing these here. You’re not limited to just the out of the box properties, you are able to create your Models that ...

If you have had the luxury of getting your hands on the Sitecore content search, I'm confident that you'll join me when I say that it can be described using one word..."AMAZING"!  There are many ways to approach writing LINQ queries within the content search. I'll cover two here: One quick and easy "static queries" approach and the other, an open dynamic query using the Sitecore PredicateBuilder class. I commonly use both. Here they are: 1# the quick easy way The example below is fairly simple, it’s going to search the web index for ...

On 30th Jan, a few of our code-junkies locked themselves in a meeting room and set up their battle stations ready to take part in a 24-hour Sitecore hackathon!For those unfamiliar with the term, a Hackathon (also known as a hack day, hackfest or codefest) is an event where computer programmers collaborate intensively on a software project.(Above: Picture of team preparing for hackathon)The team of 3 arrived with Beacons, which were given to us by our partners at Localz!A beacon is a device which harnesses the power of low energy Bluetooth ...

We’re proud to announce that 3chillies developer, Andrew Ward has attained the Sitecore Commerce Professional Developer Certification.The 4 day programme, named “Sitecore Commerce powered by Commerce Server” is a new addition to Sitecore’s portfolio of advanced developer training courses. In essence, it exists to ensure that developers have the skills they need to create world-class eCommerce sites.Large eCommerce organisations have set the bar high when it comes to providing a contextual shopping experience: They personalise content ...

I had a requirement on a recent project to download a .CSV from within Sitecore User Manager. Basically, it was to download all users within a particular domain into a .csv file. The 'download' bit proved tricky, though.To add a new button to Sitecore's ribbons, you need to: Add entries in Core (in my case /sitecore/content/Applications/Security/User Manager/Ribbon/Home/ ) for the ribbon section and button. Note that you have to specify a command to be run.  Add a patch file that defines that command, using the class and assembly ...