Latest Posts
Critical PHP Flaw: What You Need to Know
PHP2Shell, CVE-2026-109618 and CVE-2026-109619, can run code on an unpatched PHP worker without a login. Fixed releases are 8.5.12, 8.4.27, 8.3.36, and 8.2.35.
GitHub Is Asking Accounts to Turn On 2FA
GitHub's notice asks eligible accounts to enroll in two-factor authentication. The rules are in GitHub's docs. This is how to bind Google Authenticator.
What You Run on AWS Amplify
FatLeon Commerce 1.2.0 runs in an AWS account you control. These are the services the shop uses, and the accounts that stay outside it.
A Source-Code License and a Hosted Shop
A hosted shop is a store the vendor runs. FatLeon is source you deploy on your AWS. The license is one-time. AWS, email, and payments stay your accounts.
Standard or Agency
Standard and Agency are the same FatLeon Commerce codebase. Standard is for stores you operate. Agency also covers stores you build for clients, including a handoff of that one project.
What Version 1.2.0 Leaves Out
FatLeon Commerce 1.2.0 has no per-country tax engine, does not refund through Stripe or PayPal by itself, ships with guest checkout off, and uses one currency per store.
Quality Guarantee
The zip is the same product on both licenses: full source, a starter catalog, and docs. It is provided as-is. A perpetual license is not a promise of future versions.
Privacy Policy
This policy covers the fatleon.com sales site. Paddle is the merchant of record and handles checkout. FatLeon does not store full card numbers and does not sell buyer lists. Privacy requests go to info@fatleon.com.