Dwayne Carsten

I’m not going to go back and forth with you guys on this one. Every other payment gateway works. It’s only YOUR PLUGIN that doesn’t work. SO YOU GUYS need to add support, NOT BREAKDANCE.

https://drive.google.com/file/d/11ekJsGCUFCO919oILh92NICTvNjxlhTr/view?usp=sharing

This is what I mean by adding the shortcode block with the [woocommerce_checkout] shortcode, if I don’t add that block in Breakdance, Payfast checkout just doesn’t work. Yoco, Paypal, manual EFT’s and other payment providers work just fine without needing to add the shortcode block at all.

The main problem with doing this, is that this causes WooCommerce Checkout is actually rendered twice (see next image below) and this causes other plugins like shipping plugins and some other payment plugins not to work correctly or not work at all. This website, https://www.nerdcube.co.za doesn’t have shipping enabled, but some of my clients uses shipping plugins and because of this shortcode, they can’t use both shipping plugin and Payfast.

https://drive.google.com/file/d/11ka3e6uAhvpL1V7VQbucXSr_GOBmo8gd/view?usp=sharing

And it’s not the theme, I’ve tried changing to multiple themes and the problem still persisted.

Breakdance support said that it’s something you guys need to fix or make compatible with their builder, not the other way around.

• This reply was modified 1 month ago by Dwayne Carsten.

It’s exactly as I said. I’m not trying to add anything with blocks, but I need to add the shortcode block with the [woocommerce_checkout] shortcode in order to get Payfast to work, without adding that shortcode. Payfast just doesn’t work. The set back off adding this shortcode is that it breaks other plugins on the checkout page, such as Fastway’s plugin.

To replicate:

Install and enable Woocommerce
Install and enable Payfast
Install and enable Breakdance
Install and enable Breakdance Zero Theme
Add a random product
Build a quick website
Add product to cart
Checkout with Payfast

And the thing is, I can’t wait forever to have a feature added to a plugin that I use on 99% of my clients websites. It should just work out of the box like the rest of the payment plugins or shipping plugins out there.

Why do other payment plugins such as Yoco and shipping plugins like Fastway just work out of the box with no “official” support for Breakdance.

We don’t know how to replicate the issue. According to both SolidWP and MalCare. You guys have a vulnerability.

https://patchstack.com/database/vulnerability/woo-multi-currency/wordpress-curcy-plugin-2-2-0-cross-site-scripting-xss-vulnerability?_a_id=431

• This reply was modified 1 year, 2 months ago by Dwayne Carsten.

Any updates?

Thank you for getting back to me, I tried the steps you mentioned and the problem still persists. Not sure if it has something to do with protected or site-cross-origin, but it seems to me like access is being denied.

WP Strava ERROR Array
(
    [headers] => Requests_Utility_CaseInsensitiveDictionary Object
        (
            [data:protected] => Array
                (
                    [date] => Mon, 27 Sep 2021 12:58:50 GMT
                    [content-type] => application/json; charset=utf-8
                    [via] => 1.1 linkerd, 1.1 linkerd
                    [vary] => Origin
                    [server] => nginx/1.19.5
                    [status] => 403 Forbidden
                    [x-request-id] => 51596377-2521-488a-9da7-a4e6d971c407
                    [cache-control] => no-cache
                    [referrer-policy] => strict-origin-when-cross-origin
                    [x-frame-options] => DENY
                    [content-encoding] => gzip
                    [x-xss-protection] => 1; mode=block
                    [x-ratelimit-limit] => 100,1000
                    [x-ratelimit-usage] => 4,6
                    [x-download-options] => noopen
                    [x-content-type-options] => nosniff
                    [x-permitted-cross-domain-policies] => none
                )

        )

    [body] => {"message":"Forbidden","errors":[]}
    [response] => Array
        (
            [code] => 403
            [message] => Forbidden
        )

    [cookies] => Array
        (
        )

    [filename] => 
    [http_response] => WP_HTTP_Requests_Response Object
        (
            [response:protected] => Requests_Response Object
                (
                    [body] => {"message":"Forbidden","errors":[]}
                    [raw] => HTTP/1.1 403 Forbidden
Date: Mon, 27 Sep 2021 12:58:50 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Via: 1.1 linkerd, 1.1 linkerd
Vary: Origin
Server: nginx/1.19.5
Status: 403 Forbidden
X-Request-Id: 51596377-2521-488a-9da7-a4e6d971c407
Cache-Control: no-cache
Referrer-Policy: strict-origin-when-cross-origin
X-FRAME-OPTIONS: DENY
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
X-RateLimit-Limit: 100,1000
X-RateLimit-Usage: 4,6
X-Download-Options: noopen
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: none

{"message":"Forbidden","errors":[]}
                    [headers] => Requests_Response_Headers Object
                        (
                            [data:protected] => Array
                                (
                                    [date] => Array
                                        (
                                            [0] => Mon, 27 Sep 2021 12:58:50 GMT
                                        )

                                    [content-type] => Array
                                        (
                                            [0] => application/json; charset=utf-8
                                        )

                                    [via] => Array
                                        (
                                            [0] => 1.1 linkerd, 1.1 linkerd
                                        )

                                    [vary] => Array
                                        (
                                            [0] => Origin
                                        )

                                    [server] => Array
                                        (
                                            [0] => nginx/1.19.5
                                        )

                                    [status] => Array
                                        (
                                            [0] => 403 Forbidden
                                        )

                                    [x-request-id] => Array
                                        (
                                            [0] => 51596377-2521-488a-9da7-a4e6d971c407
                                        )

                                    [cache-control] => Array
                                        (
                                            [0] => no-cache
                                        )

                                    [referrer-policy] => Array
                                        (
                                            [0] => strict-origin-when-cross-origin
                                        )

                                    [x-frame-options] => Array
                                        (
                                            [0] => DENY
                                        )

                                    [content-encoding] => Array
                                        (
                                            [0] => gzip
                                        )

                                    [x-xss-protection] => Array
                                        (
                                            [0] => 1; mode=block
                                        )

                                    [x-ratelimit-limit] => Array
                                        (
                                            [0] => 100,1000
                                        )

                                    [x-ratelimit-usage] => Array
                                        (
                                            [0] => 4,6
                                        )

                                    [x-download-options] => Array
                                        (
                                            [0] => noopen
                                        )

                                    [x-content-type-options] => Array
                                        (
                                            [0] => nosniff
                                        )

                                    [x-permitted-cross-domain-policies] => Array
                                        (
                                            [0] => none
                                        )

                                )

                        )

                    [status_code] => 403
                    [protocol_version] => 1.1
                    [success] => 
                    [redirects] => 0
                    [url] => https://www.strava.com/api/v3/segments/15519133/leaderboard?filter=overall
                    [history] => Array
                        (
                        )

                    [cookies] => Requests_Cookie_Jar Object
                        (
                            [cookies:protected] => Array
                                (
                                )

                        )

                )

            [filename:protected] => 
            [data] => 
            [headers] => 
            [status] => 
        )

)