Transfer of the site on the Opencart 3 engine to the subdomain

Hello! Our website hcdut.ks.ua (running on Joomla) has been hacked — the attackers defaced the main page. Our hosting is UAhosting. Unfortunately, our developer is no longer handling this and forwarded us the following (we apologize for the Russian): During a scheduled security check, we discovered that there is a Joomla site on your hosting account using the SP Page component. In recent days, we have been recording mass attacks on Joomla sites using SP Page Builder. In some cases, the result of the attack was the placement of malicious PHP files or the addition of external JavaScript code to the Joomla database, which could cause a deface "Hacked by...". What needs to be done now, while the site is still functioning correctly: 1. Make a complete backup of the site and database. 2. Update Joomla to the latest supported version. 3. Update SP Page Builder to the latest version or reinstall it from a clean official distribution. 4. Update the template, template framework, and all installed components/modules/plugins. 5. Remove unused, old, or unknown extensions. 6. Check the users in the Joomla admin area and remove unnecessary or unknown accounts. 7. Change passwords in cPanel, FTP, database, and Joomla admin area. 8. Check for public files in the root of the site like info.php, phpinfo.php, adminer.php, administrator.zip, or other archives/service files. 9. After updating, clear the Joomla cache and optimizer caches. 10. Hand over the site to a developer for a complete check of the CMS, template, and extensions. Important: if the site is not updated, the risk of repeated attacks remains high. The hosting may block individual malicious requests or clean detected files, but complete elimination of vulnerabilities must be done at the CMS and its extensions level. Please let us know if you can take this on soon and what the estimated cost would be?

It is necessary to implement a full cookie consent management mechanism (Cookie Consent) on the OpenCart (3 pcs) websites and configure Google Consent Mode v2. Requirements: install and configure a CMP (Cookie Management Platform) or another solution for managing user consents; implement a full Cookie Consent banner with options to accept, reject, and configure cookie categories; set up Google Consent Mode v2 through Google Tag Manager; ensure correct transmission of consent statuses to Google Analytics 4, Google Ads, and other marketing services; configure the operation of analytical and advertising tags so that they only trigger according to the user permissions obtained. Currently, the cookie banner is only informational and does not manage consents, nor does it transmit their status to Google services. A complete setup is required in accordance with the current GDPR and Google Consent Mode v2 requirements.

It is necessary to add 129 products. There is an export file with the products, however, the standard import does not fit, as it is necessary to create the catalog structure before uploading: categories, sections, and if necessary, subcategories. After that, perform the product import and check that all cards are correctly distributed among the categories. If you have experience with similar tasks, please send examples of your work, completion times, and costs.

WHAT NEEDS TO BE DONE The work is divided into blocks; you can take on everything or individual blocks: Block 1 — Speed Optimization (Mobile-First) The current PageSpeed score for the mobile version is 51/100. It needs to be raised to 80+. Target metrics: LCP < 2.5 s (currently 7.4 s), FCP < 1.8 s (currently 3.9 s), TBT < 200 ms. Tasks: critical CSS inline, deferred JS, WebP/AVIF, lazy load, plugin audit. Block 2 — GTM and Analytics Remove hardcoded GA4/Google Ads scripts from header.php. Install and configure the GTM4WP plugin. Implement Google Consent Mode v2 (script or cookie banner). Block 3 — Product Card Template A single Mobile-First Single Product template in Elementor. Sticky "Buy" button while scrolling on mobile. Cross-sell block of services under the purchase button. Check the automatic transmission of events view_item, add_to_cart via GTM4WP. Block 4 — Product Feed for Google Merchant Center Install Product Feed Pro (AdTribes) or CTX Feed. Configure XML feed with correct field mapping (id, title, gtin, brand, price, availability). Daily updates via WP-Cron, auto-exclusion of products "out of stock". Block 5 — 6 Landing Pages in Elementor 3 e-commerce pages: catalog of components, ready solutions for UPS, SES kits. 3 lead generation pages: turnkey UPS installation, SES for home, solutions for business. There are detailed prototypes with the structure and blocks of each page. Block 6 — Forms and dataLayer Events 6 unique dataLayer events upon successful form submission (CF7 and Elementor Pro Forms). Mandatory requirements for all forms: phone input mask, protection against resubmission, reCAPTCHA v3 or Honeypot. --- REQUIREMENTS — Practical experience with Elementor Pro (Single Product templates, custom Page Templates) — Understanding of WooCommerce dataLayer and GTM4WP functionality — Experience in WordPress speed optimization (Critical CSS, WebP, WP Rocket or similar) — Experience in setting up dataLayer events for CF7 or Elementor Pro Forms — Portfolio or examples of similar work — mandatory Knowledge of Google Consent Mode v2 will be an advantage. --- WORK CONDITIONS The site is on live hosting — all changes only through staging or test duplicate. Any optimization should not disrupt the initialization of GTM and the dynamic dataLayer. A detailed technical specification will be provided after the first contact. Payment is staged by blocks or for the entire project (we will agree) Please write in your response: 1. Your experience with similar tasks (links or a brief description of the case) 2. Whether you are ready to perform the entire project or individual blocks 3. Estimated cost and timelines after reviewing the technical specification

Order description: We are looking for an experienced frontend developer/OpenCart specialist to optimize the loading speed of the website (categories and product cards) according to Google Core Web Vitals requirements. About the project: * CMS: OpenCart. * Specifics: The site operates in catalog mode (no cart or checkout). * Volume: 2900 items. * Server part: Already optimized (runs on OpenLiteSpeed). * Stack: Work is done exclusively with the template code, modifiers, and frontend. No work with the database. What needs to be done (Technical task): 1. Delayed loading of scripts (Delay JS): * Problem: Third-party analytics scripts (GTM, Google Tag) block the main thread on mobile devices for about 4.3 seconds. * Task: Set up delayed execution of these scripts. The scripts should activate strictly on the first user action (first scroll, tap on the screen, or mouse movement). * Important: Data collection, analytics, and ad functionality must remain intact. 2. Fixing the CLS metric (Layout Stability): * Problem: The page "jumps" and shifts during image loading. * Task: In the style files or theme template, hardcode the HTML attributes width and height for all product images in the catalog (listings) and product cards. * Goal: Reserve space for images in the DOM tree until they are actually loaded to prevent content shifting. Ensure that responsiveness (CSS) is not broken. 3. Optimization of the critical path (LCP): * Task: Add the fetchpriority="high" tag for the main product image on the first screen. This will instruct the browser to load the main product photo as a priority. Requirements for the performer and acceptance conditions: 1. No unnecessary modules: Work is performed with clean code/modifiers, without installing additional third-party or paid optimization plugins. 2. Security and layout: You are fully responsible for the layout. After making changes, the visual display of the site on mobile and PC, as well as functionality (filters, photo switching in the gallery, menu) must remain unchanged. 3. Criteria for job submission (DoD): Provide a screenshot and a link to a live test report from Google PageSpeed Insights (for the mobile version). The performance score must be no lower than 75 points, and the CLS metric must be no more than 0.1 (in the green zone). Changes must be made strictly through modifiers (OCMOD) or a copy of the theme to avoid overwriting core updates. In your response, please indicate: 1. Have you had experience configuring Delay JS specifically for GTM on OpenCart? 2. The estimated time for task completion. 3. The cost of the work.