Critical error which leads to user getting deleted (and content)

  • Resolved Kodeks

    (@kodeks)


    4 years, 3 months ago

    We had something happen where all images suddenly was deleted from the site we’re working on. In investigation of this we found that this plugin was the culprit.

    Scenario:
    – Switches from admin account to an editor (role does not matter it seems as we tried this with both editor and store manager)
    – Preview a page (front page in this case)
    – Uses the link in the bottom on the previewed page (above footer) to switch back to the admin user
    – The site hangs and after a while images starts getting erased on the server.
    – When control of the site resumes the editor user is gone and so is the content (images)

    [27/Aug/2020:10:57:02 +0200] 302, 83.952, fitfocusv2.dev.kodeks.no, 51.175.55.35, “GET /wp-login.php?action=switch_to_olduser&nr=1&_wpnonce=4aed68299f&redirect_to=https%3A%2F%2Ffitfocusv2.dev.kodeks.no%2F%3Fpreview_id%3D8%26preview_nonce%3Dc30ded1eca%26_thumbnail_id%3D-1%26preview%3Dtrue HTTP/1.1”, “https://fitfocusv2.dev.kodeks.no/?preview_id=8&preview_nonce=c30ded1eca&_thumbnail_id=-1&preview=true”, (5), “Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.135 Safari/537.36″4

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Author John Blackbourn

    (@johnbillion)

    WordPress Core Developer

    Sorry but User Switching can’t delete anything, this plugin just switches the user account and redirects you back to the page you were on. I suggest you try deactivating your other plugins one by one to identify which one is actually deleting your users and your content.

    Thread Starter Kodeks

    (@kodeks)

    You are right. Further investigation points to this being an issue with the combination of User Switching and WooCommerce Memberships. It’s Memberships which does the actual damage here, but it is initiated by switching users using this plugin. I will report this to Memberships as well, but it can’t hurt for you to know this is an issue ??

    Here’s a screengrab of the process:
    https://www.dropbox.com/s/44kugjwlmi283wv/Screen%20Recording%202020-08-28%20at%2011.25.29.mov?dl=0

    Plugin Author John Blackbourn

    (@johnbillion)

    WordPress Core Developer

    Thanks for letting me know.

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Critical error which leads to user getting deleted (and content)’ is closed to new replies.