Jason

Hey Paul did you resolve this?

I too am using an external client (curl in my case) and can not work out how to get QM to include results. I am trying to hit the WooCommerce API.

The QM documentation uses WP specific buzzwords and I am having trouble understanding what is expected. For example when I visit /wp-admin/admin-ajax.php?action=rest-nonce I get a response of 0, not a nonce I can use.

• This reply was modified 1 month ago by Jason.

@benfterpay your reply is not a solution and is off topic. Nobody is talking about static assets.

Can you please directly address the issue of this plugin including square-marketplace.js and subsequently impacting the CWV & PageSpeed Insights scores for every page on an eCommerce site?

Enabling Afterpay is currently negatively impacting the web performance of your own merchants in the eyes of Google and end users, penalising merchants relative to non-Afterpay sites.

All we want is a fix.

The plugin changelog states it’s been tested against PHP 8.3 – clearly not very well!

Hi Shameem,

There are no orders being placed in my staging site. In production we have a hundred per day. The issue can’t be reproduced because there are no customers making purchases on a staging site.

As for the pastebin, that’s a public site. Please provide a secure way to transmit the Status Report to you?

Thanks,
Jason

Hey Shameem,

I have a staging site, but have not seen this issue. Probably due to the few orders being placed.

This issue is not resolved so please don’t mark it as closed.

What is a secure way to transmit the Status Report to you?

Thanks,
Jason

Yes, it is happening with some orders but not all. I have not identified any similarities.

I ran a query and it is affecting both new and repeat customers (_wc_order_attribution_session_count > 1) on Braintree Credit Card, Paypal and Afterpay.

I do not have the Square gateway. I have Braintree and Afterpay (which uses some Square frontend code).

There are no fatal errors, and I won’t share site status for a production site publicly – if you can provide a secure way I am happy to share.

Thanks,
Jason

Hey @anastas10s ,

There are no logs for postmeta as far as I know? I can provide query results from the DB but they just prove the postmeta are being written.

I think this is going to need a dev to identify which hooks write the _wc_order_attribution* records and then we can work out how it would be getting triggered multiple times for the same order.

For reference each duplicate seems to have the same session_start_time.

Thanks, Jason

Sorry I have no idea how this ended up in the Square forums. Please delete the thread and I’ll create another for WooCommerce.

Is it as simple as adding data-size="invisible" on line 114 of recaptcha-woo.php ?

edit: No, this does not execute the captcha.

Thanks, Jason

• This reply was modified 4 months, 1 week ago by Jason.

This is still a problem that is tripping my IDS and causing all sorts of havoc. Please fix.

I have this same problem – I have 125 orders with duplicate order_attribution postmeta. In one case I have an order with 1000 _wc_order_attribution_session_entry entries in the database (order attempts from a fraudster trying fake credit cards against the Braintree credit card gateway.

Why is Woocommerce creating double entries for the same order/meta_key? This seems like a bug.

I don’t have any HPOS settings enabled.

Thanks @khungate

Can you advise whether this works for both guests and registered customers?

Where in the checkout flow do you capture emails for guests?

Thanks @shameemreza ,

Can you point to some doco that describes why the certs are needed and why and when it works without them? It costs $150 per year for an Apple developer account to get certs.

Can you also point to some doco on where and how Apply Pay activates on Cart or Checkout? As an Android user I am having trouble with testing and was surprised by these orders appearing with the Apple Pat method.

Thanks,
Jason

Thanks Peter,

The red text on the block message in Live Traffic is blocked for POST received with blank user-agent and referer.

The 3rd party client is using a specific query string, however when I try putting that in the allowlist rule it does not allow the traffic. Is there a way to test or debug rules to see why they don’t match?

This is quite a large site and I do not really want to put it in learning mode.

Thanks,
Jason

OK please do. Given the majority of web traffic is Mobile these days, it seems like an obvious one to get implemented.