HackerReposA FIELD GUIDE TO OPEN SOURCE
ProSponsor the shelf♧ 0
← Back to top all-time
magento
magento2
PHP2013–2021
magento / magento2

magento2

Prior to making any Submission(s), you must sign an Adobe Contributor License Agreement, available here at: https://opensource.adobe.com/cla.html. All Submissions you make to Adobe Inc. and its affiliates, assigns and subsidiaries (collectively “Adobe”) are subject to the terms of the Adobe Contributor License Agreement.

12Distinct people
16Mentions
0Explicit recommenders
12.2KGitHub stars
REPOSITORY AT A GLANCE

What to know before exploring

What it is

Prior to making any Submission(s), you must sign an Adobe Contributor License Agreement, available here at: https://opensource.adobe.com/cla.html. All Submissions you make to Adobe Inc. and its affiliates, assigns and subsidiaries (collectively “Adobe”) are subject to the terms of the Adobe Contributor License Agreement.

GitHub

Where it is used

No documented product use was verified in the last source check.

What people are saying

No recommendation phrase was found in the indexed comments.

No classified warning is attached to this page. Read the discussions before treating silence as approval.

Also in these discussions

No other repository is repeatedly linked in the same discussions.

This week on Hacker News

Nov 7–Nov 14 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/14/2026, 3:56:07 PM UTC.

No direct repository links were found in the indexed HN discussions over the past seven days. Older discussions are available below.

Mentions over time

HN mentions by year16 dated mentions

Observed mentions: 2013-11-21 17:54:45 UTC to 2021-04-07 11:48:09 UTC.

012342013-01-01 00:00:00 UTC to 2014-01-01 00:00:00 UTC (exclusive): 1 mentions; 1 submissions, 0 comments20132014-01-01 00:00:00 UTC to 2015-01-01 00:00:00 UTC (exclusive): 1 mentions; 0 submissions, 1 comments2015-01-01 00:00:00 UTC to 2016-01-01 00:00:00 UTC (exclusive): 4 mentions; 0 submissions, 4 comments2016-01-01 00:00:00 UTC to 2017-01-01 00:00:00 UTC (exclusive): 2 mentions; 0 submissions, 2 comments2017-01-01 00:00:00 UTC to 2018-01-01 00:00:00 UTC (exclusive): 2 mentions; 1 submissions, 1 comments20172018-01-01 00:00:00 UTC to 2019-01-01 00:00:00 UTC (exclusive): 0 mentions; 0 submissions, 0 comments2019-01-01 00:00:00 UTC to 2020-01-01 00:00:00 UTC (exclusive): 1 mentions; 0 submissions, 1 comments2020-01-01 00:00:00 UTC to 2021-01-01 00:00:00 UTC (exclusive): 4 mentions; 0 submissions, 4 comments2021-01-01 00:00:00 UTC to 2022-01-01 00:00:00 UTC (exclusive): 1 mentions; 0 submissions, 1 comments2021

Counts come from the repository’s dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.

View mention counts and date ranges
UTC ranges include their start and exclude their end. Select a period to filter the source evidence.
PeriodStart (UTC)End (exclusive, UTC)MentionsSubmissionsComments
20132013-01-01 00:00:00 UTC2014-01-01 00:00:00 UTC110
20142014-01-01 00:00:00 UTC2015-01-01 00:00:00 UTC101
20152015-01-01 00:00:00 UTC2016-01-01 00:00:00 UTC404
20162016-01-01 00:00:00 UTC2017-01-01 00:00:00 UTC202
20172017-01-01 00:00:00 UTC2018-01-01 00:00:00 UTC211
20182018-01-01 00:00:00 UTC2019-01-01 00:00:00 UTC000
20192019-01-01 00:00:00 UTC2020-01-01 00:00:00 UTC101
20202020-01-01 00:00:00 UTC2021-01-01 00:00:00 UTC404
20212021-01-01 00:00:00 UTC2022-01-01 00:00:00 UTC101

What Hacker News says

16 sources
I also dislike Magento, I switched to WooCommerce and I'm really satisfied with it, no issues. This was the issue that forced me to switch: https://github.com/magento/magento2/issues/21201 Summary: A brand new installation didn't work even though the server passed the requirements. Their response was that: > The GitHub issue tracker is intended for Magento Core technical issues only. Please refer to the Community Forums. And I was not crazy, even after the issue was closed others reported same problems: > I have exact same issue. Already wasted one whole days , then saw this post. > I have the same issue. Wasted whole day on it, did fresh install twice. Then came to this from another report that was closed. > have the same exact issue, first use of Magento. searching for a solution without luck. So, multiple people had problems fresh inst
Read the rest
alling Magento on a new server, Magento installer says installation is successful and all requirements are met, then it proudly redirects you to your broken home page.
In Fuck Magento
The main issue with BigCommerce is that they do not offer any compelling advantage over existing open source system. Moreover being a loss making entity like Shopify without any sticky system like marketplace which drives traffic, I doubt there is much value in it except that investors wants to cash-out given the current unrealistic stock market. In case a company use magento [1], Saleor [2], Sylius [3], Shuup [4], Solidus [5], Spree [6] combined with vue-storefront [7], storefront UI [8] and openflutttercommerce app [9] the amount of efforts to build a highly resilient and functional system is cheaper with complete control over customer, supply chain, pricing, product, marketing, sales and promotion data. Also the efforts will be similar to using shopify, bigcommerce with more cost-savings. Indeed shopify itself use many components from
Read the rest
rails eco-system built by Spree and Solidus community. Its very easy to build a highly customized and resilient system using cloud offering combined with these open source systems. So I do not see why a mid-size business will choose shopify or bigcommerce. They are good for mom-pop shops and simple commerce, but for unique shopping experience they fall short and better to build customized one with complete control. [1] https://github.com/magento/magento2 [2] https://github.com/mirumee/saleor [3] https://github.com/Sylius/Sylius [4] https://github.com/shuup/shuup [5] https://github.com/solidusio/solidus [6] https://github.com/spree/spree [7] https://github.com/vuestorefront/vue-storefront [8] https://github.com/Divanteltd/storefront-ui [9] https://github.com/4seer/openflutterecommerceapp
In BigCommerce S1
But it's not a hint to the compiler. It's stating a fact to the compiler. It'll stop compilation. If I have a basket of fruit, all the items in that basket container are fruit. I can't put anything other than fruit in it. It's a basket of fruit. I know how to interact with the fruit due to its type. If I am able to put dung into my basket, my fruit is spoiled and I cannot assume how to interact with the objects in the basket. This is a PHP array without types at the array level. I can put dung into it and have no idea how to interact with it. Or are you saying that a container of any type is perfectly acceptable? Did the other languages (C++, C#, Java) get it wrong? eg. on this line can you tell me what the array holds and how I interact with it? What does array $operations hold? https://github.com/magento/magento2/blob/420a8b6209a4e62ede
Read the rest
In A look at modern PHP
How do you know how you got to that point in the code without a debugger? What's the call stack like? How could you debug a call in a DLL that is being loaded by your program if you do not use a debugger? It might be alright for tiny programs but it's essential for "big" applications. printf'ing isn't going to help with 2 million+ lines of code or where there's a leak somewhere in that code (eg. someone else wrote some bad code or bad reference counting and didn't release when they should, eg. in COM wrappers in Windows), or someone is double-freeing some memory or trampling on memory and you need a hardware breakpoint to know what is modifying that memory at any given point. This doesn't affect just compiled languages either - how would you know what is constructing this object, for example? https://github.com/magento/magento2/blob/420a8
Read the rest
b6209a4e62ede9... EDIT: I say all this in a generic "use of debugger" sense, not a Go-specific debugger usage.
In Go's Tooling Is an Undervalued Technology
Thanks for the reply Ben. Regarding your question, I hate to say it, but out of my recommendations most of my clients are tending towards either Woo or Shopify. I actually personally prefer Magento for most reasons, and still have clients who are happily trading with M1, both OS and Enterprise, but the customers on M2 feel that they've been burnt by the constant show-stopper bugs (mostly in regards to integration with other systems). I really hope that I'll be able to start recommending M2 to clients again, as I've worked with Magento for many years and I know the system well. I feel it gets a lot of things right, but the M2 bugs have been frankly embarrassing, and have led to uncomfortable conversations with clients where I have to explain that yes, the old M1 site worked perfectly, but the new site that they're spending money on still h
Read the rest
as 3 month old bugs that I can't provide an update on, or even an ETA for resolution. I look forward to Magento hopefully fixing the major issues with M2 in the near future. P.S. I realised that I didn't actually post the URL to the bug I mentioned in my previous post. It's https://github.com/magento/magento2/issues/6683 ("Products updated_at field is not updating on save") which seems related to a couple of other bugs pertaining to "updated_at" fields not being modified.
In Show HN: Thirty Bees – A PrestaShop 1.6 fork
Magento is incompetent on much simpler levels than this. 1. Someone thought chmod 777 was a good idea, ever, under any circumstances. Not only is this standard practice in Magento installs (it's a how-to step in many books on Magento), it's all through the actual codebase. The below is from the Magento Enterprise 1.14.0.1 tarball, downloaded from the company (and I double-checked this after someone questioned this last time I brought this up): $ grep -r chmod .|grep 777 ./downloader/lib/Mage/Backup/Filesystem.php: chmod($backupsDir, 0777); ./app/code/core/Mage/Compiler/Model/Process.php: @chmod($dir, 0777); ./app/code/core/Mage/Install/Model/Installer/Console.php: @chmod('var/cache', 0777); ./app/code/core/Mage/Install/Model/Installer/Console.php: @chmod('var/session', 0777); ./app/code/core/Mage/Install/Model/Installer/Config
Read the rest
.php: chmod($this->_localConfigFile, 0777); ./app/code/core/Mage/Catalog/Model/Product/Attribute/Backend/Media.php: $ioAdapter->chmod($this->_getConfig()->getTmpMediaPath($fileName), 0777); ./app/Mage.php: chmod($logDir, 0777); ./app/Mage.php: chmod($logFile, 0777); ./lib/Zend/Service/WindowsAzure/CommandLine/PackageScaffolder/PackageScaffolderAbstract.php: @chmod($path, '0777'); ./lib/Zend/Service/WindowsAzure/CommandLine/PackageScaffolder/PackageScaffolderAbstract.php: @chmod($path, 0777); ./lib/Zend/Service/WindowsAzure/CommandLine/PackageScaffolder/PackageScaffolderAbstract.php: @chmod($path, 0777); ./lib/Zend/Cloud/StorageService/Adapter/FileSystem.php: chmod($path, 0777); ./lib/Varien/Autoload.php: @chmod($this->_collectPath, 0777); ./lib/Varien/File/Uploader.php: chmod($destinationFile, 0777); ./lib/Mage/Backup/Filesystem.php: chmod($backupsDir, 0777); ./errors/processor.php: @chmod($this->_reportFile, 0777); 2. The company thinks there's nothing wrong with storing money as floats: https://github.com/magento/magento2/issues/555 The way we eventually dealt with hosting Magento (which we had strongly advised against) was a concrete sarcophagus and a thirty-kilometre exclusion zone: * a cron line specifically to remove o-w permissions from all files in the webroot every minute (which is very inelegant, but the alternative is maintaining our own patches to core). * Files not owned www-data, except where Magento must be able to write to them. * deploy all webroot files as a user the webserver can't write. * cron.sh (Magento's internal cron) runs as root out of the box. We ran it as www-data. * AppArmor to keep Magento from ever, ever being able to pull shit. This caught Magento's more antisocial tendencies on more than one occasion. * Admin login: use a path other than "/admin" to foil quite a lot of attack bots at the very simplest level. We have outsourced our remaining Magento, thankfully, and I don't personally have to maintain the above any more. (You know you've been administering Magento a bit long when you can hum along to bits of "Metal Machine Music" accurately.) The use case for Magento is (apparently deliberately) confused. It's an unholy melange of a CMS and a shopping basket. There is no good out-of-the-box experience; in practice it's a job creation scheme for consultants. Even crap-tier "well technically I can tell my boss's boss we have paid support" support, with a four-day response time for them to ask you a simple question you already put the answer to in the original ticket, is swingeingly expensive. I can't say what we're paying for this standard of quality, but I can say that it's public knowledge that Magento is at least $13k/yr: http://web.archive.org/web/20120215011525/http://www.magento... The problem Magento seems to solve is when the business wants a quick site without developer involvement. After a few other abortive platforms (Plone, Drupal - which are both fine for what they are, in ways Magento just isn't, but didn't end up matching our needs), our eventual solution to this was Wordpress, which we have outsourced so I don't have to think about that either. Outsourced Wordpress with securing it being the host's problem is totally the right answer. I don't have a good answer on the shopping basket, but Magento was bad enough at that too that we went back to our in-house homerolled system. I understand some work has gone into Magento 2.0 to make it less mind-bogglingly horrible.
In Ruining the Magic of Magento's Encryption Library
> As I said: Magento Enterprise tar ball, supplied at considerable expense straight from Magento. Is this a download from the partner portal? I've asked support to check, but you can probably point out the source much more quickly than I can track it down. > Only someone working for Magento could claim 777 is ever not a hideously terrible idea to have in the webroot of a PHP application I did not make this claim. I stated that I wish it were not there. It's not necessary, as the kinds of environments in which 777 are necessary are a problem unto themselves. These instances are borne of legacy concerns which pre-date my arrival to Magento by 6 or 7 years. Pity they were not patched before now Have you ever filed a bug report for this issue? I can imagine you might say, "I shouldn't have to," (and I agree), but it's remarkable what even a s
Read the rest
ingle ticket can do. In general, it's unfortunate that Magento 1.x development and bug tracking are so... internal. In contrast to the visibility and interaction present at https://github.com/magento/magento2/issues it's clear that everyone is better off. Of course, we have to consider how to have the same kind of open dialogue for Enterprise Edition, and we're working out how to do that. Would you care to participate in a private GitHub repo, or can you suggest some other medium? Really, neither you nor I should have to spend time writing about the 777 issue - an open dialogue would likely have led this to be fixed years ago, so we could spend time bemoaning & fixing other issues!
In Magento eCommerce PHP Remote Code Execution
Speaking to your points, in turn: > Magento is a piece of junk Commerce is hard. Making an extensible commerce platform for all/most merchants is even harder. These two reasons are why there aren't a lot of options in the open source PHP-based eCommerce application space. Redesign (Magento 2) will be released in Q4 of this year (2015). Beta code is available on GitHub and we are accepting PRs: https://github.com/magento/magento2/ > installation was weird How was installation "weird" when you were using it? > developing is slow a cumbersome Speed of development depends on knowledge of architectural conventions, not unlike getting started with Symfony, Zend, Laravel, etc. > documentation was lacking I started building Magento projects in 2008. Documentation was non-existent for a long time (unfortunate given the esotericism of the app). We'
Read the rest
re solving this for Magento 2 by having tech writers on staff and by soliciting community help (docs are also on GitHub, PRs accepted): https://github.com/magento/devdocs > search was pretty much broken and it was slow Search and newsletters are insufficient for anything but the most basic needs. That's why there are so many SaaS search vendors filling this space quite well via free extensions. > on a shared host, performance must be terrible Shared hosts are never appropriate for commerce sites due to security reasons. There are a number of specialized small business hosts which run < $50 / month. For shops lacking that budget, well, there will be challenges in general.
In Magento eCommerce PHP Remote Code Execution
The team has been working on a rewrite "Magento 2" that should alleviate most of the complaints of the original Magento and adopts PHP development best practices (composer, etc). I also asked them to clarify the versioning scheme[1] specifically related to patches, etc. It sounds like it should be better, but it's hard to tell at this early stage. They've also taken a radically different approach to documentation with Magento 2. [2] [1]: https://github.com/magento/magento2/issues/1051 [2]: http://devdocs.magento.com/
In Magento eCommerce PHP Remote Code Execution

Showing the 15 most recent of 16 sources. Enable JavaScript to search and browse every indexed mention.

MAKE YOURSELF AT HOME

A few shortcuts

/
Search the collection
?
Open this guide
Esc
Close dialogs and navigation

Your saved repositories and interests stay in this browser.