Аккаунт в General iT
Войдите или создайте аккаунт для управления услугами в панели.
MODULE FOR 1C-BITRIX
Bkvsoft
Optimizer Pro accelerates web page loading and improves ratings in the Google PageSpeed tool. The module supports both GD and ImageMagick libraries, offering flexibility in image processing choices. Key image handling scenarios include: One-time image conversion. Converts images within informational blocks and high-load (HL) blocks, replacing the original files.
Optimizer Pro accelerates web page loading and improves ratings in the Google PageSpeed tool. The module supports both GD and ImageMagick libraries, offering flexibility in image processing choices.
Key image handling scenarios include:
One-time image conversion. Converts images within informational blocks and high-load (HL) blocks, replacing the original files.
Conversion during file save or retrieval. Automatically converts images when files are saved or retrieved without requiring manual replacement of existing files.
Real-time image search on the page. Locates images on the page with options to generate new files or process existing ones.
In addition to image optimization, the module provides lazy loading functionality. Images are loaded only when they become visible to the user, further enhancing site performance.
Optimizer Pro accelerates page loading and improves Google PageSpeed scores by processing WebP images along with JS, CSS, and HTML files. The tool replaces images even when they are used in background styles defined in CSS. Custom regular expressions can be added to locate images, providing greater flexibility. The module minifies CSS, JS, and HTML files to reduce their size and speed up page loading. It also allows the exclusion of system scripts that may slow down the site. For multisite systems, the module offers activity settings and exclusion lists for each site. Improvements in Google PageSpeed scores depend not only on this module but also on the quality of site development and hosting.
If “Optimizer Pro: Acceleration and Optimization for Google PageSpeed. (webp images, js, css, html)” fits the task, General iT can install the module, configure it and verify the result in the project.
UPDATE HISTORY
Security update for the bkvsoft.webp module.
This update includes fixes aimed at enhancing the security of the administrative interface, AJAX handlers, and bulk image conversion operations.
Key changes:
1. Strengthened protection of the module's AJAX endpoint.
- Mandatory administrator permission checks have been added for administrative AJAX methods.
- Bitrix sessid verification has been added to protect against CSRF.
- Only the webp image processing scenario remains public.
- The sessid is now passed in all AJAX requests within the administrative interface JavaScript.
2. Closed the CSRF vector during module settings saving.
- Server-side check_bitrix_sessid() verification has been added to the parameter saving handler.
- This check is performed before any module settings are modified.
3. Strengthened handling of user-defined regular expressions.
- Validation of user-defined PCRE patterns has been added.
- A pattern length limit has been introduced.
- Control characters and potentially dangerous ReDoS constructs are now filtered.
- Regular expression compilation is now verified before use.
- Fixed handling of callback results when no capture group is present.
4. Fixed potential stored XSS vectors in the administrative interface.
- The image_search_page_custom_regexp value is now escaped when output to a textarea via htmlspecialcharsbx().
- The site_exeptions_page value is now escaped when output to a textarea via htmlspecialcharsbx().
- Additional dynamic values output in the HTML context of the administrative page are now escaped.
5. Strengthened module settings handling.
- Safe deserialization with allowed_classes => false has been added for serialized options.
- Normalization of site_exeptions_page values has been added before saving.
- Normalization of image_search_page_custom_regexp values has been added before saving.
- Fixed comparison of the current site_exeptions_page value when saving settings.
6. Strengthened SQL query when updating b_file records.
- The file name is escaped via $DB->ForSql().
- Numeric values FILE_ID and FILE_SIZE are cast to int.
- Unsafe substitution of string values into the SQL query has been eliminated.
7. Strengthened generation of administrative PHP files for the module.
- Added an allowlist of permitted files for the administrative interface.
- Automatic generation of PHP stubs for arbitrary files from the admin/ directory has been eliminated.
- Added a check for the file name and .php extension.
8. Additional hardening of administrative code performed.
- Strengthened the check of the user object before calling IsAdmin().
- Fixed an HTML error in the title attribute of the .htaccess check button.
- Reduced risks of incorrect processing of corrupted or empty service options.
The update is recommended for all module users.
USER EXPERIENCE
How does this solution work in a real project? Share your experience and help others choose.
There are no reviews of this solution on git.ru yet. Tell us what worked well and what could be improved.
Verified purchaseAdd a key if you wish. A verified review gets a badge, priority placement and more rating weight.
Open to every clientJust sign in to your account. A key is optional; all reviews are moderated.
YOUR PROJECT INFRASTRUCTURE
MORE FOR YOUR WEBSITE
The module is designed for importing products and sections from XML, YML, and JSON files. It supports loading any product fields and properties, as well as updating stock levels and prices. Product-to-section binding is supported, along with importing section structures from a file into an arbitrary site structure.
This module automatically optimizes images and converts them to WebP or AVIF formats for browsers that support these standards. Processing is performed locally without relying on external services. This approach helps improve site performance and aligns with SEO best practices.
The CleanTalk anti-spam module provides multi-level website security without the need for CAPTCHA. The system automatically blocks bot registrations, spam comments in forums and blogs, and spam in Progressive Media tree comments. Protection extends to private user messages, product reviews in 1C-Bitrix modern online stores, order forms, and any custom forms.
BEFORE YOU ORDER