• Resolved everade

    (@everade)


    My logs are being filled to the brim WooPayment “INFO Order price is 0” and the following stuff probably due to bots crawling my pages.
    Is there a way to prevent this or does this maybe need fixing on your behalf? It certainly looks unhealthy.

    2023-11-24T01:11:06+00:00 INFO Order price is 0 ( Payment Request button disabled )
    2023-11-24T01:11:08+00:00 INFO Order price is 0 ( Payment Request button disabled )
    2023-11-24T01:11:21+00:00 INFO Order price is 0 ( Payment Request button disabled )
    2023-11-24T01:40:25+00:00 INFO Order price is 0 ( Payment Request button disabled )
    2023-11-24T02:08:37+00:00 INFO ENVIRONMENT: array (
      'WP_User' => 'Guest (non logged-in user)',
      'HTTP_REFERER' => '--',
      'HTTP_USER_AGENT' => 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)',
      'REQUEST_URI' => '/ru/product-category/artwork?currency=AUD&filter_option=black,oak&filter_size=size-a1,size-a3,size-a4&filtering=1&max_price=310&min_price=300',
      'DOING_AJAX' => false,
      'DOING_CRON' => false,
      'WP_CLI' => false,
    )
    2023-11-24T02:08:37+00:00 INFO REQUEST GET https://public-api.wordpress.com/wpcom/v2/sites/%s/wcpay/disputes?test_mode=0&pagesize=50&search%5B0%5D=warning_needs_response&search%5B1%5D=needs_response
    2023-11-24T02:08:37+00:00 INFO HEADERS: array (
      'Content-Type' => 'application/json; charset=utf-8',
      'User-Agent' => 'WooCommerce Payments/6.8.0',
    )
    2023-11-24T02:08:37+00:00 INFO RESPONSE: array (
      'data' => 
      array (
      ),
    )
    2023-11-24T03:05:01+00:00 INFO ENVIRONMENT: array (
      'WP_User' => 'website',
      'HTTP_REFERER' => 'https://website.com/wp-admin/',
      'HTTP_USER_AGENT' => 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36',
      'REQUEST_URI' => '/wp-admin/admin.php?page=wc-status',
      'DOING_AJAX' => false,
      'DOING_CRON' => false,
      'WP_CLI' => false,
    )
    2023-11-24T03:05:01+00:00 INFO REQUEST GET https://public-api.wordpress.com/wpcom/v2/sites/%s/wcpay/accounts?test_mode=0
    2023-11-24T03:05:01+00:00 INFO HEADERS: array (
      'Content-Type' => 'application/json; charset=utf-8',
      'User-Agent' => 'WooCommerce Payments/6.8.0',
    )
    2023-11-24T03:05:03+00:00 INFO RESPONSE: array (
      'account_id' => 'acct_redacted',
      'email' => '(redacted)',
      'live_publishable_key' => 'pk_live_redacted',
      'test_publishable_key' => 'pk_test_redacted',
      'is_live' => true,
      'created' => '2023-01-01 00:00:00',
      'has_pending_requirements' => false,
      'has_future_requirements' => false,
      'has_overdue_requirements' => false,
      'details_submitted' => true,
      'current_deadline' => NULL,
      'status' => 'complete',
      'capabilities' => 
      array (
        'bancontact_payments' => 'active',
        'card_payments' => 'active',
        'eps_payments' => 'active',
        'giropay_payments' => 'active',
        'ideal_payments' => 'active',
        'p24_payments' => 'active',
        'sofort_payments' => 'active',
        'transfers' => 'active',
        'bank_transfer_payments' => 'unrequested',
        'cartes_bancaires_payments' => 'unrequested',
        'klarna' => 'unrequested',
        'klarna_payments' => 'unrequested',
        'link_payments' => 'unrequested',
        'sepa_debit_payments' => 'unrequested',
      ),
      'capability_requirements' => 
      array (
        'bancontact_payments' => 
        array (
        ),
        'bank_transfer_payments' => 
        array (
        ),
        'card_payments' => 
        array (
        ),
        'cartes_bancaires_payments' => 
        array (
        ),
        'eps_payments' => 
        array (
        ),
        'giropay_payments' => 
        array (
        ),
        'ideal_payments' => 
        array (
        ),
        'klarna' => 
        array (
        ),
        'klarna_payments' => 
        array (
        ),
        'link_payments' => 
        array (
        ),
        'p24_payments' => 
        array (
        ),
        'sepa_debit_payments' => 
        array (
        ),
        'sofort_payments' => 
        array (
        ),
        'transfers' => 
        array (
        ),
      ),
      'payments_enabled' => true,
      'deposits' => 
      array (
        'status' => 'enabled',
        'restrictions' => 'deposits_unrestricted',
        'interval' => 'daily',
        'weekly_anchor' => '',
        'monthly_anchor' => NULL,
        'delay_days' => 7,
        'completed_waiting_period' => false,
        'minimum_deposit_amounts' => 
        array (
          'aud' => 500,
          'bgn' => 100,
          'cad' => 500,
          'chf' => 500,
          'czk' => 3000,
          'dkk' => 5000,
          'eur' => 500,
          'gbp' => 500,
          'hkd' => 5000,
          'huf' => 36000,
          'nok' => 5000,
          'nzd' => 500,
          'jpy' => 50,
          'sek' => 5000,
          'sgd' => 500,
          'usd' => 500,
          'ron' => 500,
          'pln' => 500,
          'aed' => 200,
        ),
      ),
      'requirements' => 
      array (
        'errors' => 
        array (
        ),
      ),
      'statement_descriptor' => 'WEBSITE.COM',
      'statement_descriptor_kanji' => '',
      'statement_descriptor_kana' => '',
      'latest_tos_agreement' => 
      array (
        'date' => '2023-01-01 00:00:00',
        'source' => 'signup',
        'is_current_version' => true,
      ),
      'fees' => 
      array (
        'base' => 
        array (
          'percentage_rate' => 0.029,
          'fixed_rate' => 30,
          'currency' => 'chf',
        ),
        'discount' => 
        array (
        ),
        'card' => 
        array (
          'base' => 
          array (
            'percentage_rate' => 0.029,
            'fixed_rate' => 30,
            'currency' => 'chf',
          ),
          'additional' => 
          array (
            'percentage_rate' => 0.02,
            'fixed_rate' => 0,
            'currency' => 'chf',
          ),
          'fx' => 
          array (
            'percentage_rate' => 0.02,
            'fixed_rate' => 0,
            'currency' => 'chf',
          ),
          'discount' => 
          array (
          ),
        ),
        'bancontact' => 
        array (
          'base' => 
          array (
            'percentage_rate' => 0.014,
            'fixed_rate' => 30,
            'currency' => 'chf',
          ),
          'additional' => 
          array (
            'percentage_rate' => 0,
            'fixed_rate' => 0,
            'currency' => 'chf',
          ),
          'fx' => 
          array (
            'percentage_rate' => 0,
            'fixed_rate' => 0,
            'currency' => 'chf',
          ),
          'discount' => 
          array (
          ),
        ),
        'eps' => 
        array (
          'base' => 
          array (
            'percentage_rate' => 0.029,
            'fixed_rate' => 30,
            'currency' => 'chf',
          ),
          'additional' => 
          array (
            'percentage_rate' => 0,
            'fixed_rate' => 0,
            'currency' => 'chf',
          ),
          'fx' => 
          array (
            'percentage_rate' => 0,
            'fixed_rate' => 0,
            'currency' => 'chf',
          ),
          'discount' => 
          array (
          ),
        ),
        'ideal' => 
        array (
          'base' => 
          array (
            'percentage_rate' => 0,
            'fixed_rate' => 35,
            'currency' => 'chf',
          ),
          'additional' => 
          array (
            'percentage_rate' => 0,
            'fixed_rate' => 0,
            'currency' => 'chf',
          ),
          'fx' => 
          array (
            'percentage_rate' => 0,
            'fixed_rate' => 0,
            'currency' => 'chf',
          ),
          'discount' => 
          array (
          ),
        ),
        'giropay' => 
        array (
          'base' => 
          array (
            'percentage_rate' => 0.014,
            'fixed_rate' => 30,
            'currency' => 'chf',
          ),
          'additional' => 
          array (
            'percentage_rate' => 0,
            'fixed_rate' => 0,
            'currency' => 'chf',
          ),
          'fx' => 
          array (
            'percentage_rate' => 0,
            'fixed_rate' => 0,
            'currency' => 'chf',
          ),
          'discount' => 
          array (
          ),
        ),
        'p24' => 
        array (
          'base' => 
          array (
            'percentage_rate' => 0.029,
            'fixed_rate' => 30,
            'currency' => 'chf',
          ),
          'additional' => 
          array (
            'percentage_rate' => 0,
            'fixed_rate' => 0,
            'currency' => 'chf',
          ),
          'fx' => 
          array (
            'percentage_rate' => 0,
            'fixed_rate' => 0,
            'currency' => 'chf',
          ),
          'discount' => 
          array (
          ),
        ),
        'sofort' => 
        array (
          'base' => 
          array (
            'percentage_rate' => 0.014,
            'fixed_rate' => 30,
            'currency' => 'chf',
          ),
          'additional' => 
          array (
            'percentage_rate' => 0,
            'fixed_rate' => 0,
            'currency' => 'chf',
          ),
          'fx' => 
          array (
            'percentage_rate' => 0,
            'fixed_rate' => 0,
            'currency' => 'chf',
          ),
          'discount' => 
          array (
          ),
        ),
      ),
      'capital' => 
      array (
        'has_active_loan' => false,
        'has_previous_loans' => false,
        'loans' => 
        array (
        ),
      ),
      'fraud_services' => 
      array (
        'stripe' => 
        array (
        ),
        'sift' => 
        array (
          'beacon_key' => 'redacted',
          'sandbox_beacon_key' => 'redacted',
        ),
      ),
      'store_currencies' => 
      array (
        'default' => 'chf',
        'supported' => 
        array (
          0 => 'chf',
        ),
      ),
      'customer_currencies' => 
      array (
        'supported' => 
        array (
          0 => 'usd',
          1 => 'aed',
          2 => 'afn',
          3 => 'all',
          4 => 'amd',
          5 => 'ang',
          6 => 'aoa',
          7 => 'ars',
          8 => 'aud',
          9 => 'awg',
          10 => 'azn',
          11 => 'bam',
          12 => 'bbd',
          13 => 'bdt',
          14 => 'bgn',
          15 => 'bif',
          16 => 'bmd',
          17 => 'bnd',
          18 => 'bob',
          19 => 'brl',
          20 => 'bsd',
          21 => 'bwp',
          22 => 'byn',
          23 => 'bzd',
          24 => 'cad',
          25 => 'cdf',
          26 => 'chf',
          27 => 'clp',
          28 => 'cny',
          29 => 'cop',
          30 => 'crc',
          31 => 'cve',
          32 => 'czk',
          33 => 'djf',
          34 => 'dkk',
          35 => 'dop',
          36 => 'dzd',
          37 => 'egp',
          38 => 'etb',
          39 => 'eur',
          40 => 'fjd',
          41 => 'fkp',
          42 => 'gbp',
          43 => 'gel',
          44 => 'gip',
          45 => 'gmd',
          46 => 'gnf',
          47 => 'gtq',
          48 => 'gyd',
          49 => 'hkd',
          50 => 'hnl',
          51 => 'htg',
          52 => 'huf',
          53 => 'idr',
          54 => 'ils',
          55 => 'inr',
          56 => 'isk',
          57 => 'jmd',
          58 => 'jpy',
          59 => 'kes',
          60 => 'kgs',
          61 => 'khr',
          62 => 'kmf',
          63 => 'krw',
          64 => 'kyd',
          65 => 'kzt',
          66 => 'lak',
          67 => 'lbp',
          68 => 'lkr',
          69 => 'lrd',
          70 => 'lsl',
          71 => 'mad',
          72 => 'mdl',
          73 => 'mga',
          74 => 'mkd',
          75 => 'mmk',
          76 => 'mnt',
          77 => 'mop',
          78 => 'mur',
          79 => 'mvr',
          80 => 'mwk',
          81 => 'mxn',
          82 => 'myr',
          83 => 'mzn',
          84 => 'nad',
          85 => 'ngn',
          86 => 'nio',
          87 => 'nok',
          88 => 'npr',
          89 => 'nzd',
          90 => 'pab',
          91 => 'pen',
          92 => 'pgk',
          93 => 'php',
          94 => 'pkr',
          95 => 'pln',
          96 => 'pyg',
          97 => 'qar',
          98 => 'ron',
          99 => 'rsd',
          100 => 'rub',
          101 => 'rwf',
          102 => 'sar',
          103 => 'sbd',
          104 => 'scr',
          105 => 'sek',
          106 => 'sgd',
          107 => 'shp',
          108 => 'sle',
          109 => 'sos',
          110 => 'srd',
          111 => 'std',
          112 => 'szl',
          113 => 'thb',
          114 => 'tjs',
          115 => 'top',
          116 => 'try',
          117 => 'ttd',
          118 => 'twd',
          119 => 'tzs',
          120 => 'uah',
          121 => 'ugx',
          122 => 'uyu',
          123 => 'uzs',
          124 => 'vnd',
          125 => 'vuv',
          126 => 'wst',
          127 => 'xaf',
          128 => 'xcd',
          129 => 'xof',
          130 => 'xpf',
          131 => 'yer',
          132 => 'zar',
          133 => 'zmw',
        ),
      ),
      'country' => '(redacted)',
      'instant_deposits_eligible' => false,
      'card_present_eligible' => false,
      'has_card_readers_available' => false,
      'platform_checkout_eligible' => false,
      'business_profile' => 
      array (
        'name' => '(redacted)',
        'url' => 'https://website.com/shop',
        'support_address' => 
        array (
        ),
        'support_email' => '[email protected]',
        'support_phone' => NULL,
      ),
      'branding' => 
      array (
        'icon' => NULL,
        'logo' => NULL,
        'primary_color' => NULL,
        'secondary_color' => NULL,
      ),
      'locale' => 'en_US',
      'has_more_failed_events' => false,
      'has_submitted_vat_data' => false,
      'is_documents_enabled' => true,
      'card_testing_protection_eligible' => false,
      'progressive_onboarding' => 
      array (
        'is_enabled' => false,
        'is_complete' => false,
        'tpv' => NULL,
        'first_transaction_date' => NULL,
      ),
      'fraud_mitigation_settings' => 
      array (
        'avs_check_enabled' => true,
        'cvc_check_enabled' => true,
      ),
      'is_deferred_intent_creation_upe_enabled' => true,
    )
    
Viewing 6 replies - 1 through 6 (of 6 total)
  • Plugin Support Beauty of Code (woo-hc)

    (@beautyofcode)

    Hey @everade,

    Thanks for reaching out!

    It looks like your error logs are filling up with the above error, correct?

    2023-11-24T01:11:06+00:00 INFO Order price is 0 ( Payment Request button disabled )

    It seems like the order total passed to WooPayments is seen as 0. Are you experiencing any issues with orders placed via WooPayments, or are payments working as expected?

    Also, do you recall any updates/changes made to your site or server before the first error was logged (theme changes/updates, newly added plugins/updates, etc.)

    Lastly, I’d like to get a better understanding of your sites current environment, can you please share a copy of your sites System Status Report which you can find via WooCommerce?→?Status.

    Select?Get system report?and then?Download for Support. This will download a TXT file that has the contents of the SSR which you can then share with us here.

    Cheers!

    Thread Starter everade

    (@everade)

    Well not just that line, the entire logs i’ve posted. It’s all over the place every single day. So it’s not just the Info that the order price was 0, but the entire back trace of whatever is going on there. Not sure if it’s an actual attack or if just crawlers are causing it.
    All of these logs seem to be only Informational, so i wouldn’t declare them as errors. Note: I’ve enabled error logs within WooPayments.

    I would have expected that enabling error logs would enable error logs, not info logs. Will disable this feature for sure, but would be great to hear if these logs are normal.

    I haven’t tested an order recently, so i’ve no idea if it still works. I would assume they started showing up as soon as i’ve enabled the debug mode. Start date of logs was: 2023.10.30

    And yes i can share the system report for sure, but not here in public due to security reasons.

    anastas10s

    (@anastas10s)

    Hi there @everade ??

    I would have expected that enabling error logs would enable error logs, not info logs. Will disable this feature for sure, but would be great to hear if these logs are normal.

    I took another look at the logs you are sending, and it appears the reported HTTP_USER_AGENT is Amazonbot.

    As a next step, I’d recommend checking out our document on responding to card testing attacks, and consider utilizing Stripe Radar. Furthermore, for an overview of available options, feel free to check out this documentation page.

    An alternative way of sharing the site’s System Status Report (SSR) with us is to paste it into our https://quickforget.com/ service and send that secret link here. Note that setting a bit higher settings than the default will come in handy.

    I hope this is helpful! Please let us know if you have any further questions or concerns.
    We will be happy to help you further.

    Thread Starter everade

    (@everade)

    Hi there @anastas10s
    So your alternate solution for keeping the data private is by sharing the “secret link” in a public forum?! How’s that supposed to be helpful?

    Precautions for card testing attacks were already in place, as well as further basic security measurements. Thanks for the links but it would have been helpful to first indicate that you are suspicious of an attack documentation about card testing attacks.

    As far as i’m aware, the useragent: Amazonbot is a simple web-crawler from Amazon, similar to Google and Bing.

    It would have been helpful if you guys could explain what exactly could trigger these logs. From my understanding the Amazonbot crawls the website and triggers a purchase with a value of 0. And WooPayments reacts by simply deactivating the purchase button.

    But why is a web crawler able to do that in the first place?

    As far as i’m concerned, there’s nothing bad happening here. I also run a test and purchases still go through just fine. I disabled logs for now so i’m no longer bothered with my logs being overfilled by this crawler.

    Feel free to close this topic. As i don’t expect to get any valuable information from here.

    Thank you.

    Plugin Support Beauty of Code (woo-hc)

    (@beautyofcode)

    Hi @everade,

    So your alternate solution for keeping the data private is by sharing the “secret link” in a public forum?! How’s that supposed to be helpful?

    I hear your concern. To clarify, this allows us to take a look at your sites current environment, and once we are done, this can be deleted so that it is no longer accessible publically.

    Precautions for card testing attacks were already in place, as well as further basic security measurements.

    As far as i’m aware, the useragent: Amazonbot is a simple web-crawler from Amazon, similar to Google and Bing.

    It’s great to hear that precautionary measures are already in place. The user agents identified in the logs Amazonbotsuggest bot activity. Bots might be crawling your pages and attempting to place orders, causing inconsistencies in the order price.

    You could look at implementing measures to mitigate bot traffic, such as CAPTCHA verification or installing security plugins to prevent automated bot actions if this is not yet implemented.

    Cheers!

    Plugin Support Beauty of Code (woo-hc)

    (@beautyofcode)

    Howdy,

    We haven’t heard back from you in a while, so I’m going to mark this as resolved – feel free to create a new topic if you need any further help.

    Cheers!

Viewing 6 replies - 1 through 6 (of 6 total)
  • The topic ‘INFO Order price is 0 logs’ is closed to new replies.