Changelog — PrestaWard Facet Shield

This changelog summarises, version by version, the impact on shops and e-commerce teams.

0.1.16

• New: limits by category and by catalogue level. A category, or all categories at a given level, may have its own limits (query size, facets, total values and values within a facet); a blank limit uses the next level, and the global limits remain the baseline. A signed Integrity policy also limits category-specific limits.
• New: suggested limits by category. The dashboard lists the categories that require a different limit, showing how many requests would trigger a block at present and the suggested limit, and allows you to apply a limit to a category with a single click. It reuses the robust rule from the global suggestion: a category that appears to be automated crawling is never relaxed.
• New: Pilot protection by category. With the shop in ‘Observation’ mode, the categories you select can block content whilst the rest simply observe. This requires a valid, signed Integrity policy (without which Facet Shield will only observe, as before) and explicit confirmation for each category; stopping the pilot requires just one click.
• New: request limit per address, optional. Counts faceted requests per minute and per address (30 per minute by default, between 5 and 600); if the limit is exceeded, in ‘Protection’ mode, the address is temporarily blocked (one hour by default, up to 24) with HTTP 429 and Retry-After, whilst in ‘Observation’ mode it is simply counted. No IP addresses are stored: only a keyed hash, which is deleted shortly after the block ends, so there is no permanent blacklist. The address is the one resolved by PrestaShop (using trusted proxies); addresses and ranges on your allowlist are never counted, and a database issue will never block a customer.
• New: verified search engines. In Protection, a Googlebot or Bingbot whose reverse and forward DNS records match the official servers receives a lightweight response with ‘noindex’ and the canonical URL of the category instead of a 403, so the filtered URL is removed from the index and no faceted SQL queries are executed. Only those claiming to be one of these search engines are queried; the verdict is cached (for 24 hours if valid, one hour if not) and queries are limited per minute across all shops.
• False positive indicators: requests that exceed the limits are also counted when they originate from a logged-in customer, a verified search engine, or a rapid burst of ten or more per minute, and the statistics show these three figures along with their proportions. Bursts are measured whilst the per-address limit is active.
• New: optional email alerts, using the shop’s email settings: rapid cache growth (no more than once a day), spikes in blocked requests (no more than once every six hours) and a separate weekly summary, for up to five recipients of your choice, with a test email button. No PDFs or links in the text. These are sent from the background maintenance process, never whilst serving a page to a customer.
• New: optional automatic cache flushing. When the faceted search cache exceeds the size you choose, Facet Shield asks ps_facetedsearch to clear its own cache using the method provided by that module, no more than once a day, and logs this in the support log. If the installed version does not have this method, nothing is altered. Facet Shield still never clears another module’s tables.
• Warning regarding vulnerable versions of ps_facetedsearch, based on a small table included in the module (nothing is downloaded): versions from 3.0.0 to 4.0.3 are affected by CVE-2026-54159, which was fixed in 4.0.4, and the dashboard recommends updating.
• The dashboard is organised into tabs (Overview, Limits and Categories, Traffic and Bots, Statistics, Cache and Maintenance, and Settings). The Overview tab shows only the mode, the last 24 hours, one main action and, at most, one alert line; only the currently open tab is calculated. The GO ON Agency support panel has its own tab, Support, which is always the last one, and the Integrity status appears at the end of all the tabs. The header now displays the GO ON Agency logo.
• The ‘Limits and Categories’ tab is organised into cards: global limits, impact of suggestions with standard-sized buttons, and a table of rules by category with a form to add another. The ‘Cache’ tab uses collapsible blocks and a single row of statistics.
• Alert emails display your shop’s logo in the header (with the shop name as the alt text) and a standard footer featuring the GO ON Agency logo and the signature ‘PrestaWard by GO ON Agency’, without any links or contact details. The footer logo is a file from the module itself, served from your shop.
• Unified design of the dashboard across the four PrestaWard modules: section headers, form cards with neutral borders and standard collapsible blocks, statistics displayed on a single line, and a larger GO ON Agency logo in the header. The main button is now a solid brand colour, without a gradient.
• Fixes an issue where, in PrestaShop 9, the admin theme displayed tabs with underlines as links and section titles in capital letters. The common styles override this only within the PrestaWard panel, so PrestaShop 1.7 and 8 look the same as before.
• Fixes an issue where, in PrestaShop 1.7, the module’s stylesheet was ignored when registered with the version number in the URL. The file is now checked and registered without parameters, so that the new styling appears in versions 1.7, 8 and 9.
• Fixes an issue where, in PrestaShop 9, the dashboard action forms and synchronisation with Integrity would validate the security token using a method not supported by PrestaShop 9, which could result in them being rejected. It is now validated using the PrestaShop 9 service; in PrestaShop 1.7 and 8, the validation remains the same.
• When the connection to Integrity cannot be updated at that moment, the panel displays a single message: the saved connection remains valid and will be retried automatically. The labels on all tabs have been translated into all nine languages.
• Fixes an issue where the connection to Integrity would degrade in the ‘all shops’ context: the installation ID is now read as a single unit from the global scope (or from the shop where it is stored) in any context; the update passes an ID stored in a shop to the global scope without regenerating it; and, if it cannot be read, the Integrity status is left as it was.
• Fixes an issue where the table on the Cache tab would shift a few pixels to the side on desktop: the container now fills the space between its margins.
• All new text is available in the module’s nine languages. The update adds a small table and three counters to the request statistics and does not activate anything on its own; the contract with the Integrity API remains unchanged and a valid signed policy can still only tighten the limits.

0.1.15

• Request statistics no longer grow indefinitely: every hour, records per minute exceeding one hour are grouped into a single hourly record without changing totals or graphs, and those prior to the new ‘Statistics retention (days)’ period (90 by default, between 30 and 365) are deleted in small batches in the background, never whilst a page is being served to a customer.
• The bot diagnostic no longer stops collecting samples once it reaches 500: it retains the most recent ones and discards the oldest. This is controlled by the ‘Diagnostic samples to retain’ setting (500 by default, between 50 and 5000).
• New ‘Suggested Limits’ panel: based on traffic recorded in Observation mode, it suggests a value for each limit (query size, facets, total values and values within a facet), shows how many requests are blocked by the current limits and how many would be blocked by the suggestion, and explains the main cause, for example which filter in which category is causing the most overshoot. A button applies the four suggested limits to the selected shop without changing the mode.
• The suggestions are never stricter than the default limit; they never relax a limit and adhere to Integrity’s signed policy when it is stricter. If a small number of categories account for requests that exceed a limit, the suggestion is calculated based on the remainder; the dashboard indicates which proportion of the excess comes from how many categories, and that limit is not altered upon application.
• The faceted search cache panel distinguishes between cache tables and index tables, shows how their size has changed over the last few days with a warning if it is growing rapidly, lists the shops where ps_facetedsearch is missing or disabled, and links to its native configuration. Facet Shield only reads these tables: it never modifies or deletes them.
• The dashboard is much faster in shops with a high volume of records: with over half a million records, the loading time drops from around 20 seconds to just a few seconds, and to a fraction of a second if it is reopened within ten minutes. The figures displayed remain unchanged.
• All new text is available in the module’s nine languages.
• The support and diagnostics panel is positioned just before the Integrity section, as in all other PrestaWard modules, and in the ‘all shops’ context it no longer disappears: it indicates that a shop must be selected.
• Synchronise with Integrity every time you open the dashboard, using a background request that never slows down the page, and no more than once per minute per shop.

0.1.14

• Stops retrying registration with Integrity when the shop’s registration key changes, and displays a clear warning.
• Renews the signed Integrity policy before it expires and keeps the current policy and its limits if a renewal fails.
• A signed Integrity policy can only tighten the limits configured in the shop, never relax them: for size, number of facets, number of values and number of values per facet, the lower of your limit and that of the policy applies, and you decide the mode (Observation or Protection).
• Corrects the included policy key so that it works in PHP 7.1 and 7.2.
• Adds the GO ON Agency support panel in nine languages, with a downloadable diagnostic report that does not include customer data and is not sent automatically. It can only be downloaded by an employee with editing permissions who has selected a shop.
• Declares compatibility from PrestaShop 1.7.7.0, the oldest version tested.

0.1.13

• Fixes the registration test and Back Office tasks in PrestaShop 9.
• It accepts both valid formats for property test URLs with strict validation.
• Improves diagnostics and registration retries in Integrity.

0.1.12

• Uninstallation also removes the table of exclusions by category and all Integrity configuration keys (installation phase, registration test, sealed credential and keys), leaving no trace.
• Adds the missing protective index.php files and the direct-access check via _PS_VERSION_ in the Back Office controller and the last three update scripts, as in the module’s other entry points.
• Adopts PrestaWard’s shared design system: the Back Office panel uses the standard dark header, the unified status indicator (Disabled/Observing/Protecting) and the ‘GO ON Monitoring’ panel, all served from a single shared stylesheet hosted locally.

0.1.11 — security update

• Exclusions by category only bypass the standard complexity analysis: complete PHP serialisation signatures are still analysed, logged and blocked in Protection mode.
• It is documented that ps_facetedsearch 4.0.4 or later is required to address CVE-2026-54159; Facet Shield remains a defence-in-depth measure, not a substitute for the official fix.

0.1.10

• Local URL simulator or q, daily trends based on existing aggregates and limited CSV exports.
• Auditable exclusions by category, with a mandatory reason and logical deletion; IP addresses and user-agents are not excluded.
• The first activation of Protection requires evidence from Observation itself and calculates a conservative estimate of the impact of the proposed policy; if no requests have been observed, it does not allow the block to be activated.
• All production directories in the package contain a index.php file that terminates execution, including views/js.
• The guide explains how to re-enrol Integrity per shop after rotating _COOKIE_KEY_, without retrieving or sharing the previous key.
• Additional protection against full PHP serialisation headers in facet queries, without blocking normal values containing text such as O:.
• A configurable notification per shop when the faceted search cache estimate exceeds the defined threshold; the module does not automatically delete or update anything.
• Integrity’s retries and heartbeats no longer run within the synchronous rendering of any Back Office screen: they are scheduled via an authenticated and limited asynchronous request.
• The query for the legacy event summary has been removed without deleting historical data, and the existing updates panel is retained as the sole notification of new versions.

0.1.9

• Registration now uses PrestaShop’s native module dispatcher and no longer relies on friendly URLs, .htaccess rules or route caches.
• Updating from previous versions idempotently fixes the necessary hooks without deleting policies or statistics.
• When the dashboard is opened, it automatically checks for a new version, using a six-hour cache and without blocking the Back Office if the manifest does not respond.
• Flow validated in PrestaShop 1.7, 8 and 9.

0.1.8

• Protection is limited to actual category and search controllers, ensuring that parameters q unrelated to facets are not blocked.
• Blocked HEAD requests return headers only, with no body.
• The diagnostic identifies the user-agent as declared and correctly explains the abbreviated user-agent string, which is retained optionally.
• Integrity is presented with a minimal level of connectivity and synchronisation, without any internal details that might confuse the user.
• Functional compatibility verified on PrestaShop 1.7, 8 and 9.

0.1.7

• Automatic heartbeat without cron: traffic to the shop triggers a limited local poll, and the server updates its presence with the Integrity API without exposing credentials to the browser.
• Atomic locking per shop, a six-hour interval and a fifteen-minute wait following failures to prevent duplicate submissions.
• Manual synchronisation of Integrity also refreshes the heartbeat.
• Compatibility verified on PrestaShop 1.7, 8 and 9.

0.1.6

• Authenticated heartbeat, automatic retries and detailed connection diagnostics with the Integrity API.
• Optional diagnostics are also available in Observation, with agent identification, filters by bot and reason, pagination and a bounded sample of the facet combination.
• Administrator-controlled retention: number of samples, estimated storage space and manual deletion from the Back Office.
• Visual and read-only indicators for size, estimated records and facet cache tables.
• Reorganised interface: Protection modes and activation moved under ‘What it does’, sections separated, and Integrity API moved to the end.
• No IP addresses, cookies or full URLs; texts available in nine languages.
• Installation, blocking, diagnostics, caching, uninstallation and reinstallation have been verified on PrestaShop 1.7, 8 and 9.

0.1.5

• Automatic, non-blocking registration in the Integrity API via shop validation.
• Installation requires no accounts, API keys or manual registration steps.
• Signed policies verified with trusted anchors included in the release.

0.1.4

• Complexity histograms and atomic counts for all analysed requests.
• Value limits per facet, malformed requests and restricted request context.
• Observation status, start of the statistical period and protected reset per shop.
• Reasons and statistics translated.

0.1.3

• Metrics for analysed requests, within limits, excesses and actual blocks.
• Added per shop and minute without IP, URL, user agent or selected values.
• PrestaWard accessible mode selector and visual shell for desktop and mobile.

0.1.2

• Installation ID and shop configured for the Integrity API.
• Policy signed with the latest valid status per shop and secure return to Observation.
• Connection status and manual retry from the Back Office, without calls from the Front Office.