Legacy order data blank since 9.7.0 or 9.7.1 upgrade

  • Resolved btconline

    (@btconline)


    1 day, 23 hours ago

    Hi, my website is set to automatically update plugins. I noticed that this morning all my legacy order data is now blank within the WooCommerce > Orders page, and nothing is showing in details if I open up an old order. While looking into this further, I received notification that the site had updated to 9.7.1 by itself but this did not resolve the issue.

    A new order from today has just processed correctly but I am otherwise unable to see any prior sales or details.

    Have there been some schema changes that have broken this? Am I able to recover my old data, or is it safe to roll back to an earlier version until this is fixed?

    System Status Report below: 

    ### WordPress Environment ###

    WordPress address (URL): [Redacted]
    Site address (URL): [Redacted]
    WC Version: 9.7.1
    Legacy REST API Package Version: The Legacy REST API plugin is not installed on this site.
    Action Scheduler Version: ? 3.9.0
    Log Directory Writable: ?
    WP Version: 6.7.2
    WP Multisite: –
    WP Memory Limit: 1 GB
    WP Debug Mode: –
    WP Cron: ?
    Language: en_US
    External object cache: –

    ### Server Environment ###

    Server Info: LiteSpeed
    PHP Version: 7.4.33
    PHP Post Max Size: 1 GB
    PHP Time Limit: 1500
    PHP Max Input Vars: 2000
    cURL Version: 8.11.0
    OpenSSL/1.1.1w

    SUHOSIN Installed: –
    MySQL Version: 5.5.5-10.6.21-MariaDB-cll-lve-log
    Max Upload Size: 1 GB
    Default Timezone is UTC: ?
    fsockopen/cURL: ?
    SoapClient: ?
    DOMDocument: ?
    GZip: ?
    Multibyte String: ?
    Remote Post: ?
    Remote Get: ?

    ### Database ###

    [REDACTED]

    ### Post Type Counts ###

    adt_product_feed: 3
    attachment: 86
    custom_css: 1
    ig_campaign: 1
    ig_message: 1
    mihdan_yandex_turbo: 1
    mycred_rank: 1
    nav_menu_item: 10
    page: 12
    pagelayer-template: 6
    popup_theme: 8
    post: 20
    product: 7
    product_variation: 17
    revision: 404
    shop_coupon: 14
    shop_order_placehold: 139
    wp_global_styles: 1

    ### Security ###

    Secure connection (HTTPS): ?
    Hide errors from visitors: ?

    ### Active Plugins (20) ###

    BackWPup: by BackWPup – WordPress Backup & Restore Plugin – 5.0.5
    BulletProof Security: by AITpro Website Security – 6.9
    EWWW Image Optimizer: by Exactly WWW – 8.1.1
    Google Analytics for WordPress by MonsterInsights: by MonsterInsights – 9.3.0
    Gratisfaction- Loyalty Rewards Referral Birthday and Giveaway Program: by Appsmav – 4.4.6
    Icegram Engage - Popups, Optins, CTAs & lot more...: by icegram – 3.1.32
    IndexNow: by Microsoft Bing – 1.0.3
    LiteSpeed Cache: by LiteSpeed Technologies – 6.5.4
    Loginizer: by Softaculous – 1.9.8
    Yandex Turbo Feed: by Mikhail Kobzarev – 1.6.6
    Newsletter: by Stefano Lissa & The Newsletter Team – 8.7.1
    Pagelayer: by Pagelayer Team – 1.9.8
    PopularFX Website Templates: by Pagelayer Team – 1.3.1
    Discount Rules Core: by Flycart – 2.6.7
    Preview E-mails for WooCommerce: by Digamber Pradhan – 2.2.13
    Product Feed PRO for WooCommerce: by AdTribes.io – 13.4.1.3
    WooCommerce Square: by WooCommerce – 4.8.6
    WooCommerce: by Automattic – 9.7.1
    Wordfence Security: by Wordfence – 8.0.3
    Yoast SEO: by Team Yoast – 24.6

    ### Inactive Plugins (7) ###

    Akismet Anti-spam: Spam Protection: by Automattic - Anti-spam Team – 5.3.7
    Google for WooCommerce: by WooCommerce – 2.9.9
    Points and Rewards for WooCommerce: by WP Swings – 2.6.2
    Popup Builder - Create highly converting, mobile friendly marketing popups.: by Looking Forward Software Incorporated. – 4.3.6
    Product Feed Manager for WooCommerce: by RexTheme – 7.4.32
    RSS for Yandex Turbo: by Flector – 1.32
    WooCommerce Custom Product Addons Free: by Acowebs – 3.0.13

    ### Must Use Plugins (1) ###

    BPS MU Tools: by AITpro – 9.0

    ### Settings ###

    Legacy API Enabled: –
    Force SSL: ?
    Currency: AUD ($)
    Currency Position: left
    Thousand Separator: ,
    Decimal Separator: .
    Number of Decimals: 2
    Taxonomies: Product Types: external (external)
    grouped (grouped)
    simple (simple)
    variable (variable)

    Taxonomies: Product Visibility: exclude-from-catalog (exclude-from-catalog)
    exclude-from-search (exclude-from-search)
    featured (featured)
    outofstock (outofstock)
    rated-1 (rated-1)
    rated-2 (rated-2)
    rated-3 (rated-3)
    rated-4 (rated-4)
    rated-5 (rated-5)

    Connected to WooCommerce.com: –
    Enforce Approved Product Download Directories: ?
    HPOS feature enabled: ?
    Order datastore: Automattic\WooCommerce\Internal\DataStores\Orders\OrdersTableDataStore
    HPOS data sync enabled: –

    ### Logging ###

    Enabled: ?
    Handler: Automattic\WooCommerce\Internal\Admin\Logging\LogHandlerFileV2
    Retention period: 30 days
    Level threshold: –
    Log directory size: 303 KB

    ### WC Pages ###

    Shop base: #521 - /shop/
    Cart: #523 - /cart/ -  Contains the woocommerce/classic-shortcode block
    Checkout: #525 - /checkout/ -  Contains the woocommerce/classic-shortcode block
    My account: #527 - /my-account/ -  Contains the [woocommerce_my_account] shortcode
    Terms and conditions: #529 - /terms/

    ### Theme ###

    Name: PopularFX
    Version: 1.2.6
    Author URL: https://pagelayer.com
    Child Theme: ? – If you are modifying WooCommerce on a parent theme that you did not build personally we recommend using a child theme. See: How to create a child theme
    Theme type: Classic theme
    WooCommerce Support: ?

    ### Templates ###

    Overrides: –

    ### Square ###

    Environment: Production
    Tokenization Enabled: 
    Debug Mode: Off

    ### Admin ###

    Enabled Features: activity-panels
    analytics
    product-block-editor
    coupons
    core-profiler
    customize-store
    customer-effort-score-tracks
    import-products-task
    experimental-fashion-sample-products
    shipping-smart-defaults
    shipping-setting-tour
    homescreen
    marketing
    mobile-app-banner
    onboarding
    onboarding-tasks
    pattern-toolkit-full-composability
    product-custom-fields
    remote-inbox-notifications
    remote-free-extensions
    payment-gateway-suggestions
    printful
    shipping-label-banner
    subscriptions
    store-alerts
    transient-notices
    woo-mobile-welcome
    wc-pay-promotion
    wc-pay-welcome-page
    launch-your-store
    add-to-cart-with-options-stepper-layout

    Disabled Features: product-data-views
    experimental-blocks
    coming-soon-newsletter-template
    minified-js
    product-pre-publish-modal
    settings
    async-product-editor-category-field
    product-editor-template-system
    blueprint
    reactify-classic-payments-settings
    use-wp-horizon
    blockified-add-to-cart

    Daily Cron: ? Next scheduled: 2025-03-05 13:08:34 +08:00
    Options: ?
    Notes: 81
    Onboarding: completed

    ### Action Scheduler ###

    Complete: 5,502
    Oldest: 2025-02-02 15:19:04 +0800
    Newest: 2025-03-05 15:03:31 +0800

    Failed: 1
    Oldest: 2024-09-16 21:46:17 +0800
    Newest: 2024-09-16 21:46:17 +0800

    Pending: 9
    Oldest: 2025-03-05 15:18:31 +0800
    Newest: 2025-03-08 12:34:37 +0800


    ### Status report information ###

    Generated at: 2025-03-05 15:17:57 +08:00

    The page I need help with: [log in to see the link]

Viewing 4 replies - 1 through 4 (of 4 total)
  • Thread Starter btconline

    (@btconline)

    I have also checked my customers page, and all entries are registered today’s date, with email as a random string at gmail.com?

    • This reply was modified 1 day, 23 hours ago by btconline.
    Thread Starter btconline

    (@btconline)

    Looking further into it, it appears that ever since upgrading from 9.6.2 to 9.7.0, the system has been generating 10-20 new orders per day with junk credentials that are getting stuck as “Pending payment”.

    I had just happened to open up the order page and it had landed close to my last recalled order number, making me think I had lost all of my order history.

    I have reverted back to 9.6.0 for now, the order placed under 9.7.1 seems to be okay and no new dummy orders are appearing for now

    Thread Starter btconline

    (@btconline)

    Unfortunately new blank Payment Pending orders are still appearing despite the downgrade. I’ve attempted upgrading back to 9.6.2 since before the issue started happening, but besides running a database upgrade when prompted, these are slowly still trickling in.

    I’ve enabled the additional debug logging under the Square section in Woocommerce settings and you can see an example of a junk orders/customer being created.

    Is this a plugin issue, or some sort of website attack? 

    2025-03-05T11:16:16+00:00 Notice Response
    code: 200
    message:
    headers: Array
    (
    [0] => HTTP/2 200
    [date] => Wed, 05 Mar 2025 11:16:16 GMT
    [content-type] => application/json
    [content-length] => 241
    [cf-ray] => 91b933440eeb101f-LAX
    [cf-cache-status] => DYNAMIC
    [content-encoding] => gzip
    [strict-transport-security] => max-age=631152000; includeSubDomains; preload
    [vary] => Accept-Encoding
    [frame-options] => DENY
    [square-version] => 2024-03-20
    [squareup--connect--v2--common--versionmetadata-bin] => CgoyMDI0LTAzLTIw
    [x-content-type-options] => nosniff
    [x-envoy-decorator-operation] => /v2/customers/**
    [x-frame-options] => DENY
    [x-sq-dc] => aws
    [x-sq-istio-migration-ingress-proxy] => sq-envoy
    [x-sq-region] => us-west-2
    [x-xss-protection] => 1; mode=block
    [set-cookie] => __cf_bm=DhsMe5z.p2IiXjZVYWOO5sqUKcAYhXCqx9xTBn.BNeo-1741173376-1.0.1.1-aaW_yGxKwuShHGZUflFJIzmIUFfUzZVzSJh1FcXj_rOOwb2agafEM.fog.2JPmOef3rCieFFBRWJD7wdCFfoTQSkaKTvpllaXtU_fqD.YDk; path=/; expires=Wed, 05-Mar-25 11:46:16 GMT; domain=.connect.squareup.com; HttpOnly; Secure; SameSite=None
    [server] => cloudflare
    )
    body: {
    "customer": {
    "id": "SQ0K0Q5EWD1A6KK92VSZ4SKWVM",
    "created_at": "2025-03-05T11:16:16.755Z",
    "updated_at": "2025-03-05T11:16:16Z",
    "email_address": "[email protected]",
    "address": {
    "postal_code": "64236"
    },
    "reference_id": "197",
    "preferences": {
    "email_unsubscribed": false
    },
    "creation_source": "THIRD_PARTY",
    "version": 0
    }
    }
    CONTEXT: {"_legacy":true}
    Thread Starter btconline

    (@btconline)

    Further testing update – after looking into similar complaints, it appears this was possibly some sort of bot attack. Although I have wordfence and cloudflare bot protection enabled, these were appearing at such a slow pace it did not appear to be triggering their protection mechanisms.

    I’ve implemented a simple human verification check into the woocommerce checkout page and the exposed new user registration form, using the “No-Bot registration” plugin, which appears to have stopped the flow of fake orders & customers

    Have re-upgraded to 9.7.1 and things seem fine again

Viewing 4 replies - 1 through 4 (of 4 total)
  • You must be logged in to reply to this topic.