Customer passwords being changed after every purchase

  • Resolved gifjose

    (@gifjose)


    2 years, 9 months ago

    Hi,

    Something weird started happening a couple of weeks ago. With every purchase, user’s passwords get changed and they loose access to the site.

    Simultaneous to the “order received” email, they also receive a “Password Changed” email after every purchase. The users do not get automatically logged out but will not be able to re-login.

    No changes were done to the site lately, so I have no clue of what might have started this behaviour.

    This happens with only the Woocommerce plugin active and the default Twenty Twenty one theme.

    I have tested the site on different servers and the behaviour is the same.

    Any idea of what could be happening and what is triggering it?

    I do notice that “wc-admin_import_customers” keeps being run, but not sure if that has any influence on this.

    Thank you

    I have attached the system report

    
### WordPress Environment ###

WordPress address (URL): https://wpdev.tempurl.host
Site address (URL): https://wpdev.tempurl.host
WC Version: 6.5.1
REST API Version: ? 6.5.1
WC Blocks Version: ? 7.4.3
Action Scheduler Version: ? 3.4.0
Log Directory Writable: ?
WP Version: 6.0
WP Multisite: –
WP Memory Limit: 256 MB
WP Debug Mode: ?
WP Cron: ?
Language: en_GB
External object cache: ?

### Server Environment ###

Server Info: nginx/1.20.1
PHP Version: 7.4.29
PHP Post Max Size: 128 MB
PHP Time Limit: 300
PHP Max Input Vars: 3000
cURL Version: 7.58.0
OpenSSL/1.1.1

SUHOSIN Installed: –
MySQL Version: 5.5.5-10.3.35-MariaDB-1:10.3.35+maria~bionic
Max Upload Size: 128 MB
Default Timezone is UTC: ?
fsockopen/cURL: ?
SoapClient: ?
DOMDocument: ?
GZip: ?
Multibyte String: ?
Remote Post: ?
Remote Get: ?

### Database ###

WC Database Version: 4.9.0
WC Database Prefix: wp_gj_
Total Database Size: 75.35MB
Database Data Size: 46.43MB
Database Index Size: 28.92MB
wp_gj_woocommerce_sessions: Data: 0.05MB + Index: 0.02MB + Engine InnoDB
wp_gj_woocommerce_api_keys: Data: 0.02MB + Index: 0.03MB + Engine InnoDB
wp_gj_woocommerce_attribute_taxonomies: Data: 0.02MB + Index: 0.02MB + Engine InnoDB
wp_gj_woocommerce_downloadable_product_permissions: Data: 0.02MB + Index: 0.06MB + Engine InnoDB
wp_gj_woocommerce_order_items: Data: 0.02MB + Index: 0.02MB + Engine InnoDB
wp_gj_woocommerce_order_itemmeta: Data: 0.02MB + Index: 0.03MB + Engine InnoDB
wp_gj_woocommerce_tax_rates: Data: 0.02MB + Index: 0.06MB + Engine InnoDB
wp_gj_woocommerce_tax_rate_locations: Data: 0.02MB + Index: 0.03MB + Engine InnoDB
wp_gj_woocommerce_shipping_zones: Data: 0.02MB + Index: 0.00MB + Engine InnoDB
wp_gj_woocommerce_shipping_zone_locations: Data: 0.02MB + Index: 0.03MB + Engine InnoDB
wp_gj_woocommerce_shipping_zone_methods: Data: 0.02MB + Index: 0.00MB + Engine InnoDB
wp_gj_woocommerce_payment_tokens: Data: 0.02MB + Index: 0.02MB + Engine InnoDB
wp_gj_woocommerce_payment_tokenmeta: Data: 0.02MB + Index: 0.03MB + Engine InnoDB
wp_gj_woocommerce_log: Data: 0.02MB + Index: 0.02MB + Engine InnoDB
wp_gj_actionscheduler_actions: Data: 0.02MB + Index: 0.13MB + Engine InnoDB
wp_gj_actionscheduler_claims: Data: 0.02MB + Index: 0.02MB + Engine InnoDB
wp_gj_actionscheduler_groups: Data: 0.02MB + Index: 0.02MB + Engine InnoDB
wp_gj_actionscheduler_logs: Data: 0.02MB + Index: 0.03MB + Engine InnoDB
wp_gj_affiliate_wp_campaigns: Data: 0.00MB + Index: 0.00MB + Engine
wp_gj_audit_trail: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
wp_gj_commentmeta: Data: 0.01MB + Index: 0.02MB + Engine InnoDB
wp_gj_comments: Data: 0.01MB + Index: 0.05MB + Engine InnoDB
wp_gj_defender_audit_log: Data: 3.52MB + Index: 3.08MB + Engine InnoDB
wp_gj_defender_email_log: Data: 0.02MB + Index: 0.02MB + Engine InnoDB
wp_gj_defender_lockout: Data: 1.52MB + Index: 2.34MB + Engine InnoDB
wp_gj_defender_lockout_log: Data: 1.52MB + Index: 0.56MB + Engine InnoDB
wp_gj_defender_scan: Data: 0.02MB + Index: 0.00MB + Engine InnoDB
wp_gj_defender_scan_item: Data: 0.02MB + Index: 0.03MB + Engine InnoDB
wp_gj_email_log: Data: 0.05MB + Index: 0.00MB + Engine InnoDB
wp_gj_ewwwio_images: Data: 2.76MB + Index: 3.03MB + Engine InnoDB
wp_gj_failed_jobs: Data: 0.01MB + Index: 0.00MB + Engine InnoDB
wp_gj_fmera_fields: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
wp_gj_fmera_meta: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
wp_gj_links: Data: 0.01MB + Index: 0.01MB + Engine InnoDB
wp_gj_mailchimp_carts: Data: 0.01MB + Index: 0.00MB + Engine InnoDB
wp_gj_options: Data: 0.71MB + Index: 0.04MB + Engine InnoDB
wp_gj_pmxe_exports: Data: 0.13MB + Index: 0.00MB + Engine MyISAM
wp_gj_pmxe_google_cats: Data: 0.26MB + Index: 0.05MB + Engine MyISAM
wp_gj_pmxe_posts: Data: 0.03MB + Index: 0.02MB + Engine MyISAM
wp_gj_pmxe_templates: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
wp_gj_postmeta: Data: 30.80MB + Index: 14.55MB + Engine InnoDB
wp_gj_posts: Data: 2.16MB + Index: 1.90MB + Engine InnoDB
wp_gj_queue: Data: 0.01MB + Index: 0.00MB + Engine InnoDB
wp_gj_revslider_css: Data: 0.06MB + Index: 0.00MB + Engine InnoDB
wp_gj_revslider_layer_animations: Data: 0.01MB + Index: 0.00MB + Engine InnoDB
wp_gj_revslider_navigations: Data: 0.01MB + Index: 0.00MB + Engine InnoDB
wp_gj_revslider_sliders: Data: 0.01MB + Index: 0.00MB + Engine InnoDB
wp_gj_revslider_slides: Data: 0.01MB + Index: 0.00MB + Engine InnoDB
wp_gj_revslider_static_slides: Data: 0.01MB + Index: 0.00MB + Engine InnoDB
wp_gj_rm_fields: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
wp_gj_rm_forms: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
wp_gj_rm_front_users: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
wp_gj_rm_notes: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
wp_gj_rm_paypal_fields: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
wp_gj_rm_paypal_logs: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
wp_gj_rm_rules: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
wp_gj_rm_sent_mails: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
wp_gj_rm_sessions: Data: 0.03MB + Index: 0.01MB + Engine MyISAM
wp_gj_rm_stats: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
wp_gj_rm_submissions: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
wp_gj_rm_submission_fields: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
wp_gj_rm_tasks: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
wp_gj_rm_task_exe_log: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
wp_gj_smush_dir_images: Data: 0.01MB + Index: 0.02MB + Engine InnoDB
wp_gj_termmeta: Data: 0.01MB + Index: 0.02MB + Engine InnoDB
wp_gj_terms: Data: 0.01MB + Index: 0.02MB + Engine InnoDB
wp_gj_term_relationships: Data: 0.01MB + Index: 0.01MB + Engine InnoDB
wp_gj_term_taxonomy: Data: 0.01MB + Index: 0.02MB + Engine InnoDB
wp_gj_usermeta: Data: 1.26MB + Index: 1.52MB + Engine InnoDB
wp_gj_users: Data: 0.06MB + Index: 0.04MB + Engine InnoDB
wp_gj_wcpdf_invoice_number: Data: 0.02MB + Index: 0.00MB + Engine InnoDB
wp_gj_wc_admin_notes: Data: 0.02MB + Index: 0.00MB + Engine InnoDB
wp_gj_wc_admin_note_actions: Data: 0.02MB + Index: 0.02MB + Engine InnoDB
wp_gj_wc_category_lookup: Data: 0.02MB + Index: 0.00MB + Engine InnoDB
wp_gj_wc_customer_lookup: Data: 0.02MB + Index: 0.03MB + Engine InnoDB
wp_gj_wc_download_log: Data: 0.02MB + Index: 0.03MB + Engine InnoDB
wp_gj_wc_order_coupon_lookup: Data: 0.02MB + Index: 0.03MB + Engine InnoDB
wp_gj_wc_order_product_lookup: Data: 0.02MB + Index: 0.06MB + Engine InnoDB
wp_gj_wc_order_stats: Data: 0.02MB + Index: 0.05MB + Engine InnoDB
wp_gj_wc_order_tax_lookup: Data: 0.02MB + Index: 0.03MB + Engine InnoDB
wp_gj_wc_product_attributes_lookup: Data: 0.36MB + Index: 0.45MB + Engine InnoDB
wp_gj_wc_product_download_directories: Data: 0.02MB + Index: 0.02MB + Engine InnoDB
wp_gj_wc_product_meta_lookup: Data: 0.02MB + Index: 0.09MB + Engine InnoDB
wp_gj_wc_rate_limits: Data: 0.02MB + Index: 0.02MB + Engine InnoDB
wp_gj_wc_reserved_stock: Data: 0.02MB + Index: 0.00MB + Engine InnoDB
wp_gj_wc_tax_rate_classes: Data: 0.02MB + Index: 0.02MB + Engine InnoDB
wp_gj_wc_webhooks: Data: 0.02MB + Index: 0.02MB + Engine InnoDB
wp_gj_wfls_2fa_secrets: Data: 0.02MB + Index: 0.02MB + Engine InnoDB
wp_gj_wfls_settings: Data: 0.02MB + Index: 0.00MB + Engine InnoDB
wp_gj_wysija_campaign: Data: 0.01MB + Index: 0.00MB + Engine InnoDB
wp_gj_wysija_campaign_list: Data: 0.01MB + Index: 0.00MB + Engine InnoDB
wp_gj_wysija_custom_field: Data: 0.01MB + Index: 0.00MB + Engine InnoDB
wp_gj_wysija_email: Data: 0.01MB + Index: 0.00MB + Engine InnoDB
wp_gj_wysija_email_user_stat: Data: 0.01MB + Index: 0.00MB + Engine InnoDB
wp_gj_wysija_email_user_url: Data: 0.01MB + Index: 0.00MB + Engine InnoDB
wp_gj_wysija_form: Data: 0.01MB + Index: 0.00MB + Engine InnoDB
wp_gj_wysija_list: Data: 0.01MB + Index: 0.00MB + Engine InnoDB
wp_gj_wysija_queue: Data: 0.01MB + Index: 0.01MB + Engine InnoDB
wp_gj_wysija_url: Data: 0.01MB + Index: 0.00MB + Engine InnoDB
wp_gj_wysija_url_mail: Data: 0.01MB + Index: 0.00MB + Engine InnoDB
wp_gj_wysija_user: Data: 0.01MB + Index: 0.01MB + Engine InnoDB
wp_gj_wysija_user_field: Data: 0.01MB + Index: 0.00MB + Engine InnoDB
wp_gj_wysija_user_history: Data: 0.01MB + Index: 0.00MB + Engine InnoDB
wp_gj_wysija_user_list: Data: 0.01MB + Index: 0.00MB + Engine InnoDB
wp_gj_yith_wcwl: Data: 0.01MB + Index: 0.01MB + Engine InnoDB
wp_gj_yith_wcwl_lists: Data: 0.01MB + Index: 0.02MB + Engine InnoDB
wp_gj_yoast_seo_links: Data: 0.01MB + Index: 0.00MB + Engine MyISAM
wp_gj_yoast_seo_meta: Data: 0.05MB + Index: 0.05MB + Engine MyISAM

### Post Type Counts ###

attachment: 7118
custom_css: 1
customize_changeset: 1
jetpack_migration: 2
jp_img_sitemap: 3
jp_img_sitemap_index: 1
jp_sitemap: 1
jp_sitemap_master: 1
nav_menu_item: 32
page: 23
post: 6
product: 1
seedprod: 1
shop_order: 13
um_directory: 1
um_form: 3
um_role: 2
vgpc: 2
vgwc: 6
wpcf7_contact_form: 1
wphb_minify_group: 2
wysijap: 1

### Security ###

Secure connection (HTTPS): ?
Hide errors from visitors: ?Error messages should not be shown to visitors.

### Active Plugins (2) ###

WooCommerce: by Automattic – 6.5.1
WPMU DEV Dashboard: by WPMU DEV – 4.11.13

### Inactive Plugins (40) ###

A2 Optimized WP: by A2 Hosting – 2.1.4.4.2
Akismet Anti-Spam: by Automattic – 4.2.4
All-in-One WP Migration: by ServMask – 7.61
All-in-One WP Migration Unlimited Extension: by ServMask – 2.45
All-in-One WP Migration URL Extension: by ServMask – 2.58
Beautiful and responsive cookie consent: by Beautiful Cookie Banner – 2.8.1
CAPTCHA 4WP: by WP White Security – 7.0.6.1
Catch IDs: by Catch Plugins – 2.5
Classic Editor: by WordPress Contributors – 1.6.2
Coming Soon Page, Maintenance Mode, Landing Pages & WordPress Website Builder by SeedProd: by SeedProd – 6.12.0
Contact Form 7: by Takayuki Miyoshi – 5.5.6.1
Defender Pro: by WPMU DEV – 3.0.0
Download Plugin: by metagauss – 2.0.4
Enable jQuery Migrate Helper: by The WordPress Team – 1.3.0
GiF Adicionar SKU: by GiF Design – 1
GiF Admin Bar Remover: by GiF Design Studios – 1
GiF Controlo Utilizadores: by Gif Design Studios – 1.2
Health Check & Troubleshooting: by The www.ads-software.com community – 1.4.5
Hummingbird Pro: by WPMU DEV – 3.3.3
Maintenance: by WebFactory Ltd – 4.06
Manage Notification E-mails: by Virgial Berveling – 1.8.2
New User Approve: by WPExpertsio – 2.4.1
NinjaScanner: by The Ninja Technologies Network – 3.0.10
Query Monitor: by John Blackbourn – 3.9.0
Save Contact Form 7: by Nimblechapps – 2.0
Smart WooCommerce Search: by YummyWP – 2.3.1
Smush Pro: by WPMU DEV – 3.10.1
Template Library and Redux Framework: by Extendify – 4.3.14
VG WooCarousel: by VinaWebSolutions – 1.3
VinaGecko Helper: by VinaGecko – 1.0.0
Woocommerce Extra Fields Registration: by Osama Ahmed Attia – 1.0.2
WooCommerce PDF Invoices & Packing Slips: by WP Overnight – 2.15.0
WooCommerce Social Media Share Buttons: by Toastie Studio – 1.3.0
Wordfence Security: by Wordfence – 7.5.10
WPBakery Page Builder: by Michael M - WPBakery.com – 6.9.0
WP Downgrade | Specific Core Version: by Reisetiger – 1.2.5
WP Mail Logging: by Wysija – 1.10.4
WP Rollback: by Impress.org – 1.7.1
WP WooCommerce Best Selling Products by Category: by WP Online Support – 1.2
YITH WooCommerce Wishlist: by YITH – 3.9.0

### Dropin Plugins (1) ###

object-cache.php: WPMU DEV Hummingbird Object Cache

### Must Use Plugins (1) ###

WPMU DEV Hosting: by WPMU DEV – 0.1

### Settings ###

API Enabled: –
Force SSL: –
Currency: EUR (€)
Currency Position: right_space
Thousand Separator: 
Decimal Separator: ,
Number of Decimals: 2
Taxonomies: Product Types: external (external)
grouped (grouped)
simple (simple)
variable (variable)

Taxonomies: Product Visibility: exclude-from-catalog (exclude-from-catalog)
exclude-from-search (exclude-from-search)
featured (featured)
outofstock (outofstock)
rated-1 (rated-1)
rated-2 (rated-2)
rated-3 (rated-3)
rated-4 (rated-4)
rated-5 (rated-5)

Connected to WooCommerce.com: –
Enforce Approved Product Download Directories: ?

### WC Pages ###

Shop base: #89561 - /shop/
Cart: #89563 - /cart/
Checkout: #89565 - /checkout/
My account: #89567 - /my-account/
Terms and conditions: ? Page not set

### Theme ###

Name: Twenty Nineteen
Version: 2.3
Author URL: https://www.ads-software.com/
Child Theme: ? – If you are modifying WooCommerce on a parent theme that you did not build personally we recommend using a child theme. See: How to create a child theme
WooCommerce Support: ?

### Templates ###

Overrides: –

### Action Scheduler ###

Complete: 2
Oldest: 2022-06-09 10:08:03 +0100
Newest: 2022-06-09 10:08:03 +0100

### Status report information ###

Generated at: 2022-06-09 10:18:19 +01:00

    The page I need help with: [log in to see the link]

Viewing 12 replies - 1 through 12 (of 12 total)
  • Roxy

    (@roxannestoltz)

    Hi @gifjose ,

    Thanks for reaching out!

    WC Database Version: 4.9.0

    I am able to see that you have an outdated WC Database version, which does not match the WC version.

    As a first step, please update your WooCommerce Database to match the core version. This can be done via WooCommerce > Status > Tools > Update database. Below is more detail documentation on this:

    https://woocommerce.com/document/how-to-update-woocommerce/#woocommerce-data-update-notice

    Please ensure that you have a good backup of your full site and database in place before doing the updates, so that, should something go wrong, you are able to easily restore your site to a functioning state.

    Most hosting providers have this included in the subscription however, you may also consider using a service such as Jetpack, or a plugin like UpdraftPlus.

    Please let me know if this makes any difference?

    Thanks!

    Thread Starter gifjose

    (@gifjose)

    Hi Roxanne,

    Thank you for your prompt response.

    I’ve updated it and the problem still persists.

    The reasons for the mismatch was due to a downgrade we did prior to contact you to eliminate the WC update as a variable. It has been corrected now.

    We did the same with WP versions (6.0, 5.8,5.7) and PHP versions (8.0 and 7.4). To no avail.

    Mirko P.

    (@rainfallnixfig)

    Hi @gifjose,

    With every purchase, user’s passwords get changed and they loose access to the site.

    That’s quite unusual. Can you reinstall WordPress under WP dashboard > Updates > Re-install version 6.0?

    Can you also remove the woocommerce folder via FTP and replace it with a newly downloaded version? See the guide below for more info:

    ❍ Download the WooCommerce plugin and extract the files.
    ❍ Log into your FTP server using FileZilla or any other FTP client. Navigate to the /wp-content/plugins/ directory of your WordPress install.
    ❍ Delete the woocommerce folder.
    ❍ Extract/upload downloaded woocommerce folder in the /wp-content/plugins/ directory.
    ❍ After that, head over to WP dashboard > Plugins of your WordPress site and activate the WooCommerce plugin.

    Make sure you do this in a dev/staging environment without affecting your live site. There is more information in the Backups and Staging section of our support documentation.

    Let us know how it goes.

    Thread Starter gifjose

    (@gifjose)

    Hi Mirko,

    You are correct, the behaviour is highly unusual.

    I have manually uploaded the woocommerce folder, latest version, to the server and the behaviour still persists.

    As soon as the order is complete, I receive an email with the order details and an email titled “[SITE] Password Changed”.

    I have cleared the WC data, added one product and even set the price to 0 (to eliminate the payment gateways variable) and no luck again. All plugins are deactivated and no custom code on the theme being used.

    I have never encountered this issue before but I cannot find any other variable apart from WC that is triggering this action.

    Thank you,

    Hello,

    Sorry to hear that.

    I was checking but in my case, I did not receive the password reset after placing orders. That’s odd.


    Link to image: https://snipboard.io/q9J6DO.jpg

    To check better, did you report the issue to your host? Can you provide a copy of any fatal error log found under WooCommerce > System Status > Logs (if any).

    Please let us know.

    Thread Starter gifjose

    (@gifjose)

    Hi Igor,

    That makes it even more confusing as it is still happening to me :
    See screenshot

    Have you tried logging out and logging back in to the site using the original password?

    Also, could the user having admin privileges have anything to do with it?

    Thank you,

    Roxy

    (@roxannestoltz)

    Hi @gifjose ,

    I have not been able to reproduce the issue, as I placed the order and never received a password reset email.

    However, I was not prompted to enter a password upon registration, only my email address and within the “welcome email” received, the link to click here to set your new password seems to be broken which caused me to have to reset the password directly on the site as I couldn’t log back in once I had logged out, triggering a reset password email.

    This issue could possibly be a cause of autogenerating a password for your users.

    Please could you check WooCommerce > Settings > Accounts and uncheck “When creating an account, send the new user a link to set their password“, as seen in the screenshot below, and see if this makes any difference?

    https://snipboard.io/YD15fm.jpg

    Please let me know how this goes!

    Hello @gifjose,

    Have you tried logging out and logging back into the site using the original password?

    I tried from the first email I received:

    Link to image: https://snipboard.io/xMuBN7.jpg

    Then I receive:

    Oops! That page can’t be found.

    To check better please provide the error logs as requested earlier.

    We’ll forward to hearing from you.

    Thread Starter gifjose

    (@gifjose)

    Hi Igor,

    Thank you for your support.

    You can access the logs here:

    https://wpdev.tempurl.host/wp-content/uploads/error_log.txt

    Thank you,

    Jose

    Mirko P.

    (@rainfallnixfig)

    Hi Jose,

    The Automattic\WooCommerce\Admin\API\Options::get_options function is deprecated since version 3.1.

    There is already a report about this deprecation notice in Github and it will be fixed in the next release of WooCommerce core.

    https://github.com/woocommerce/woocommerce/issues/32863

    Not sure if it’s related to the initial issue you reported on this thread though.

    We can also see in the logs a PHP fatal error related to this plugin:

    /plugins/wp-downgrade/

    Reach out to the plugin author for more details on why this error is being generated.

    I also tested a few times and didn’t get the password changed email. Only the processing order notification was sent out.

    Since we’re unable to replicate the issue you could ask your host if they’re able to figure out what’s going on with the password changed email that you receive and, if they can’t help further, I’d suggest looking at our partner site Codeable where you’re able to hire from a curated list of experts who can access your installation and help you with troubleshooting.

    Cheers.

    Hello,

    This is marked as resolved, but I don’t see how it was resolved based on the comments in this thread. I’ve been having this exact same issue and contacted woocommerce and they also were unable to replicate the issue in my case.

    Please let me know if/how it was finally resolved.

    Thank you

    Hi @bejessica

    We’d like to assist you better but we kindly request that you create a new thread here:
    https://www.ads-software.com/support/plugin/woocommerce/#new-topic-0

    In the new thread:
    * Add a link to this thread so that we can locate your initial query
    * Share with us more details about the error
    * Assist with us the recent fatal error logs – you can find these by going to WooCommerce → Status → Logs then change the dropdown to view the most recent fatal error logs

    Thanks!

Viewing 12 replies - 1 through 12 (of 12 total)
  • The topic ‘Customer passwords being changed after every purchase’ is closed to new replies.