Two critical PHP core bugs allow unauthenticated remote code execution on almost every PHP version since 5.4. PHP fixed them on 21 October 2026. What is affected, how to check your shop, and what the workarounds do and don't cover.
Since 2 August 2026, AI chatbots in online shops have to disclose that they are AI. What Article 50 requires, what the Digital Omnibus did not change, who is responsible when the bot comes from a vendor, and what to check in Shopware.
Concrete values for Shopware 6.7: size the PHP-FPM pool from your RAM, set OPcache up for production, and split Redis between cache, sessions, and carts. With copy-paste snippets for www.conf, php.ini, and YAML.
Mandatory since 27 September 2026: the EU legal guarantee notice and the GARAN label. What the rules require, what Shopware ships from 6.6.10.24 and 6.7.14.0, and where you still have to do the work yourself.
Shopware 6 hosting after the 2026 price rises: system requirements, real monthly costs for Hetzner, netcup, maxcluster and Timme, and what managed hosting does not cover.
The developer and shop-owner guide to Shopware 6.6 → 6.7: admin overhaul (Vite, Pinia, Meteor), Redis for multi-server setups, ESI caching, and a step-by-step upgrade.
The developer's honest guide to Shopware 6.5 → 6.6 migration: Vue 3 admin overhaul, all.js removal, Symfony 7, SDK rename, and a step-by-step process.
Real Shopware 6 cost data: licensing, hosting, plugins, and setup — what you'll actually pay from starter to enterprise, based on 10+ years of real projects.
When Shopware 6 is the right choice and when it isn't – honest answers from 10+ years of Shopware development, not a sales brochure.