byronbaycandles.com

Site at a glance

Site updates

  • Byron Bay Candles — Site Update — 2026-09-22 — WooCommerce 11.0.1 → 11.1.1, 24 updates incl. Stripe 11 + GTM4WP 2 majors, Blocksy 2.1.57. 9 public customer-data files quarantined, staging isolated from Klaviyo/Meta, Blocksy agency licence restored
  • Byron Bay Candles — Site Update — 2026-08-25 — WooCommerce 10.8.1 → 11.0.1, 30+ plugins, theme 2.1.53. Shipping fallback shipped, two regressions held, customer order exports found publicly downloadable and quarantined
  • 2026-08-24 — run 1, staging only. Shipping root cause found (weight stored without a leading zero breaks StarShipIT’s rate request). LIVE untouched

Standing rules for this site

  • DO NOT UPDATE kadence-blocks above 3.7.2 — silently empties the cart behind HTTP 200
  • DO NOT UPDATE fluid-checkout above 4.2.2 — 500s the checkout page
  • Both are enforced in code by mu-plugins/bbc-block-known-bad-updates.php, not just documented
  • Never install the vault’s blocksy-companion-pro here — it is nulled and this site holds a real BC agency licence. wp-admin/Freemius only
  • Never remove mu-plugins/freemius-license-repair.php or zzz-bbc-shipping-fallback.php
  • Aelia: every shipping-method option write must also write the _AUD variant. The base option is inert here
  • Yoast free and Premium must move together. The vault’s Yoast Premium forges my.yoast.com — refused, use MyYoast
  • B2B Suite stores wholesale shipping rules as POST META on the group post, not in wp_options, and branches on the b2bwhs_b2buser user meta
  • Bot Protection 403s external curl. Verify renders from the server over loopback with a no-www Host header, or in a real browser
  • .htaccess does nothing here — nginx. Check for publicly reachable data files every run

Open with the client

  • reCaptcha for WooCommerce — subscription lapsed AND completely unconfigured, so there is no captcha protection at all. Needs renewal plus Google keys
  • PW WooCommerce Gift Cards Pro — licence expired, 3.93 waiting. Gift cards handle money
  • Implausible product weights: 1 g for Custom Engraved Lids, 140 g and 180 g for two others
  • Wholesale gets no rate at all if the carrier returns nothing — her instruction, but it is a dead end. Wholesale fallback wanted?
  • The Family B2B group was never mentioned and is deliberately untouched
  • ~192 users hold a wholesale role but are not flagged as wholesale, so the site treats them as retail
  • Public order-export exposure disclosed — her call on any formal privacy assessment