madideas

Hi Iván

Have now found out that the code shows the tooltip only if option ‘yith_wapo_show_tooltips’ is set, and there’s no way in the plugin to control it…? So again is this planned to come back at some point?

Ok… so is it planned to come back at any point? Seems rather odd that the option’s in the control panel but doesn’t display on the frontend?

Also, why has the display changed so it’s always expanded rather than collapsed when the page is loaded?

I’m not aware of any option to activate or otherwise the tooltip – ? Text is populated for the option, and as noted, it all worked before updating the plugin.

Ok, simple solution, needed to check the ‘Connection available to all administrators, editors, and authors’ in the Jetpack dashboard! Working now.

Hi Alex

I think YITH is the free version; screenshot attached of plugin info.

Note in screenshots, behaviour on the product page is identical for both versions of the plugin, it’s wrong at the basket level. You can see from the screenshot that the product description with add-on is correct, but the price is incorrect for version 4.2.0

Cheers
Rob

Above is 4.1.7, below is 4.2.0

Below is product page, same with both versions

• This reply was modified 1 year, 10 months ago by madideas.
• This reply was modified 1 year, 10 months ago by madideas.

Details sent as per your request. I have logs available both for Stripe payments debug and for the servers that show the nature of the attack.

Thanks for your reply, but as per above, Google captcha is live on the site and prevented a large number of attempts, but also let a large number through despite being on its maximum protection setting.

As almost all of the testing attempts that got through failed, I don’t think your rate checking limits did anything – these probably only work on valid results – ? Certainly I had over 600 ‘payment fail’ emails from the site over a 2-hour period – this itself ought to be able to trigger some reaction – ?

Settings are Google recaptcha V2 enabled, visible ‘Im not a robot’
Daily limit no captcha 25
Daily limit with captcha 10

Unfortunately it’s not a realistic option to turn off all the plugins/themes on a live and busy site.

I will endeavour to run some tests to see if it’s in any way reproducible.

Thanks for the quick fix!

Ok thanks for the suggestion

Further to this I’m seeing discrepancies in the Stripe logs; specifically for all the failures, the only thing in the Stripe log is an event of type ‘checkout.session.completed’, so there’s no sign of a checkout session event being set up as is the case where everything works.

There haven’t been any significant changes to the site; I apply updates to plugins weekly. I don’t normally check the SWPM logs but did yesterday due to another issue, which is how I noticed this as there were no other indications of the problem. So I have no idea how long this has been going on.

Certainly the failures are outnumbering the successes in the log file at the moment; here’s what’s in the current log. You can see that button 2145 (Buy now) hasn’t worked at all, but 1674 and 1676 (both subs) are showing success and failure, though rather more failures:

[2022/08/28 13:43:17] - FAILURE: 1674 can't be found (sub)

[2022/08/28 20:35:30] - SUCCESS: 1675 working (sub)

[2022/08/29 03:24:54] - FAILURE: 2145 can't be found (sub)
[2022/08/29 05:22:38] - FAILURE: 1675 can't be found (sub)
[2022/08/29 09:43:50] - FAILURE: 1675 can't be found (sub)

[2022/08/29 15:48:48] - SUCCESS: 1675 working (sub)

[2022/08/29 18:52:45] - FAILURE: 1676 can't be found (sub)
[2022/08/29 19:43:20] - FAILURE: 1676 can't be found (sub)
[2022/08/29 21:25:14] - FAILURE: 1675 can't be found (sub)
[2022/08/30 01:59:08] - FAILURE: 2145 can't be found (Buy now)
[2022/08/30 02:05:13] - FAILURE: 2145 can't be found (Buy now)
[2022/08/30 02:52:26] - FAILURE: 1676 can't be found (sub)
[2022/08/30 04:54:36] - FAILURE: 1674 can't be found (sub)
[2022/08/30 08:49:14] - FAILURE: 1675 can't be found (sub)
[2022/08/30 09:09:50] - FAILURE: 2145 can't be found (Buy now)
[2022/08/30 09:15:59] - FAILURE: 1674 can't be found (sub)
[2022/08/30 10:03:22] - FAILURE: 2145 can't be found (Buy now)
[2022/08/30 10:43:26] - FAILURE: 1674 can't be found (sub)
[2022/08/30 13:15:50] - FAILURE: 1674 can't be found (sub)

[2022/08/30 13:29:01] - SUCCESS: 1675 working (sub)

[2022/08/31 00:17:58] - FAILURE: 1674 can't be found (sub)
[2022/08/31 00:21:25] - FAILURE: 1675 can't be found (sub)
[2022/08/31 06:02:53] - FAILURE: 1674 can't be found (sub)
[2022/08/31 06:22:35] - FAILURE: 1674 can't be found (sub)
[2022/08/31 08:01:07] - FAILURE: 2145 can't be found (Buy now)
[2022/08/31 09:31:24] - FAILURE: 2145 can't be found (Buy now)
[2022/08/31 10:37:18] - FAILURE: 1676 can't be found (sub)
[2022/08/31 13:40:53] - FAILURE: 2145 can't be found (Buy now)
[2022/08/31 15:16:03] - FAILURE: 1675 can't be found (sub)
[2022/08/31 17:41:26] - FAILURE: 1675 can't be found (sub)
[2022/08/31 19:15:23] - FAILURE: 1675 can't be found (sub)
[2022/08/31 23:25:15] - FAILURE: 1675 can't be found (sub)
[2022/09/01 05:19:14] - FAILURE: 1676 can't be found (sub)
[2022/09/01 12:09:41] - FAILURE: 1676 can't be found (sub)
[2022/09/01 16:05:54] - FAILURE: 1676 can't be found (sub)
[2022/09/01 16:50:45] - FAILURE: 1675 can't be found (sub)
[2022/09/01 19:25:55] - FAILURE: 1674 can't be found (sub)
[2022/09/01 20:32:11] - FAILURE: 2145 can't be found (Buy now)

[2022/09/02 06:21:47] - SUCCESS: 1675 working (sub)

[2022/09/02 09:17:37] - FAILURE: 1675 can't be found (sub)

[2022/09/02 12:43:10] - SUCCESS: 1674 working (sub)

[2022/09/02 13:01:56] - FAILURE: 1674 can't be found (sub)
[2022/09/02 22:47:31] - FAILURE: 1675 can't be found (sub)
[2022/09/03 01:16:07] - FAILURE: 1675 can't be found (sub)
[2022/09/03 01:31:46] - FAILURE: 2145 can't be found (Buy now)
[2022/09/03 01:45:44] - FAILURE: 2145 can't be found (Buy now)
[2022/09/03 02:55:08] - FAILURE: 1676 can't be found (sub)
[2022/09/03 04:15:04] - FAILURE: 1675 can't be found (sub)
[2022/09/03 09:30:08] - FAILURE: 1676 can't be found (sub)
[2022/09/03 11:07:16] - FAILURE: 2145 can't be found (Buy now)
[2022/09/03 13:45:09] - FAILURE: 2145 can't be found (Buy now)
[2022/09/03 17:17:19] - FAILURE: 2145 can't be found (Buy now)

[2022/09/03 19:05:14] - SUCCESS: 1674 working (sub)

[2022/09/03 20:29:48] - FAILURE: 1676 can't be found (sub)
[2022/09/03 21:28:47] - FAILURE: 1676 can't be found (sub)
[2022/09/04 01:48:07] - FAILURE: 1676 can't be found (sub)

• This reply was modified 2 years, 2 months ago by madideas.

Membership is annual. So expiry of the account was shown from 00:00 on that date up to 09:25, which is when Stripe created the invoice/took payment.

Also seeing these errors when visiting the ACL admin page:

Warning: Undefined array key “login_enable_language_switcher” in /homepages/28/d72828267/htdocs/MAD-WP/wp-content/plugins/admin-custom-login/includes/get_value.php on line 43

Warning: Undefined array key “login_pass_reset_msg” in /homepages/28/d72828267/htdocs/MAD-WP/wp-content/plugins/admin-custom-login/includes/get_value.php on line 61

Actually you can ignore this, seems that the shop manager manually interfered with the order and hadn’t said!