• Resolved dzseti

    (@dzseti)


    Vendors logging in to the front-end store manager and selecting “payments” (or from there “withdrawals” get an ajax error warning as in the title of this post. The conosole also shows a 403 error:

    POST https://website.com/wp-admin/admin-ajax.php 403

    When we tested the process (of vendors requesting a withdrawal) one year ago, there were no issues. (Please also note that withdrawal payments are set to manual in case this has something to do with it).

    There are no fatal erros in the Woocommerce logs.

    At a bit of a loss as to where to go from here.

Viewing 7 replies - 1 through 7 (of 7 total)
  • Plugin Author WC Lovers

    (@wclovers)

    Please check from Google Chrome console is any error generating?

    Check Ajax response also.

    Thread Starter dzseti

    (@dzseti)

    As mentioned already the console log shows a 403 error.

    The ajax request and response is as follows (form data omitted):

    GENERAL
    Request URL: https://website.com/wp-admin/admin-ajax.php
    Request Method: POST
    Status Code: 403
    Remote Address: 172.67.177.106:443
    Referrer Policy: strict-origin-when-cross-origin

    RESPONSE HEADERS
    alt-svc: h3=”:443″; ma=86400, h3-29=”:443″; ma=86400, h3-28=”:443″; ma=86400, h3-27=”:443″; ma=86400
    cache-control: no-cache, must-revalidate, private
    cf-cache-status: DYNAMIC
    cf-ray: 6b3b8558cb5dfa34-AMS
    content-encoding: br
    content-type: text/html; charset=UTF-8
    date: Thu, 25 Nov 2021 14:20:59 GMT
    expect-ct: max-age=604800, report-uri=”https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct”
    expires: Sat, 26 Jul 1997 05:00:00 GMT
    nel: {“success_fraction”:0,”report_to”:”cf-nel”,”max_age”:604800}
    pragma: no-cache
    report-to: {“endpoints”:[{“url”:”https:\/\/a.nel.cloudflare.com\/report\/v3?s=odc2oZLSih2%2F4Zb7QxGYYAd9Gwa%2F0xDdiKswa%2FoSWxKrw15PPaP3JmgsXwMd5NqZ4JBc3ze5HfkGhA5ORHfMa8IdR%2B3ePTI%2FLa3opFG5h8zjm3CkJBZpCo6hqgqkCmwFhVLy%2BFuw7zc%3D”}],”group”:”cf-nel”,”max_age”:604800}
    server: cloudflare
    x-powered-by: PHP/7.3.17

    REQUEST HEADERS
    :authority: website.com
    :method: POST
    :path: /wp-admin/admin-ajax.php
    :scheme: https
    accept: application/json, text/javascript, */*; q=0.01
    accept-encoding: gzip, deflate, br
    content-length: 2539
    content-type: application/x-www-form-urlencoded; charset=UTF-8
    cookie: wordpress_sec_b4fe821efdc15065f6b79267f897687a=2blackcats%7C1638016188%7CSoI8lDyJqx9aenMlzh7zXYeXBVynQiWbAQEfBbNnQb3%7Cd14db541c0a816bf7a5e7790828ec86bf2219b1fa4942574b98b3273fd9d2c37; cookie_notice_accepted=true; wordpress_test_cookie=WP+Cookie+check; wf_loginalerted_e90382b19f9a88c818cc8b60be70d049c9296936c5136711f5629e949ec5216b=de4d5c8eed3474da4a0c0b3a61b7af7594ae579354b6953fc97ff0c7323e978d; tk_ai=woo%3AVaKJBOzyHQy6wVXfl1gpC%2BRx; wp-settings-1=libraryContent%3Dbrowse%26editor%3Dtinymce%26hidetb%3D0%26posts_list_mode%3Dlist%26mfold%3Do; wp-settings-time-1=1631521670; PHPSESSID=38r594olliiir38pbhmd78ph9p; SESSnsl=nsl619f817f76fd91.61683370; wordpress_logged_in_b4fe821efdc15065f6b79267f897687a=2blackcats%7C1638016188%7CSoI8lDyJqx9aenMlzh7zXYeXBVynQiWbAQEfBbNnQb3%7C9c8f482a9c2dfaea3d90822e18add6624fc8450bbfd197e0dbdf27cd784446e0; wfwaf-authcookie-c65d495c05f567edb19e998c9a1ec7be=41%7Cother%7Cunfiltered_html%2Cedit_others_posts%2Cupload_files%2Cedit_posts%2Cread%7Ca03235d2d7bc1cc8910b92824fb5f95f3381aa2c516a548420c8993bc79e5478; _ga=GA1.2.162292846.1637845374; _gid=GA1.2.875638186.1637845374; _gat_gtag_UA_71569896_3=1
    origin: https://website.com
    referer: https://website.com/store-manager/payments/
    sec-ch-ua: “Chromium”;v=”94″, “;Not A Brand”;v=”99″
    sec-ch-ua-mobile: ?0
    sec-ch-ua-platform: “Windows”
    sec-fetch-dest: empty
    sec-fetch-mode: cors
    sec-fetch-site: same-origin
    user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.114 Safari/537.36
    x-requested-with: XMLHttpRequest

    Hopefully this helps

    Plugin Author WC Lovers

    (@wclovers)

    This is not the right Ajax request-response.

    Thread Starter dzseti

    (@dzseti)

    This was the ajax that was producing the 403 error. Here is a shortened version of the form data. The data includes: “controller: wcfm-payments”

    FORM DATA
    draw: 1
    columns[0][data]: 0
    columns[0][name]:
    columns[0][searchable]: true
    columns[0][orderable]: false
    columns[0][search][value]:
    columns[0][search][regex]: false

    order[0][column]: 0
    order[0][dir]: asc
    start: 0
    length: 25
    search[value]:
    search[regex]: false
    action: wcfm_ajax_controller
    controller: wcfm-payments
    start_date:
    end_date:
    status_type: completed
    wcfm_ajax_nonce: cb058f641f

    *******************************************************************************

    The other ajax that does not report an error is this one:

    GENERAL
    Request URL: https://website.com/wp-admin/admin-ajax.php
    Request Method: POST
    Status Code: 200
    Remote Address: 172.67.177.106:443
    Referrer Policy: strict-origin-when-cross-origin

    RESPONSE HEADERS
    access-control-allow-credentials: true
    access-control-allow-origin: https://website.com
    alt-svc: h3=”:443″; ma=86400, h3-29=”:443″; ma=86400, h3-28=”:443″; ma=86400, h3-27=”:443″; ma=86400
    cache-control: no-cache, must-revalidate, max-age=0
    cf-cache-status: DYNAMIC
    cf-ray: 6b3bb00fee264bef-AMS
    content-encoding: br
    content-type: text/html; charset=UTF-8
    date: Thu, 25 Nov 2021 14:50:10 GMT
    expect-ct: max-age=604800, report-uri=”https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct”
    expires: Wed, 11 Jan 1984 05:00:00 GMT
    nel: {“success_fraction”:0,”report_to”:”cf-nel”,”max_age”:604800}
    pragma: no-cache
    referrer-policy: strict-origin-when-cross-origin
    report-to: {“endpoints”:[{“url”:”https:\/\/a.nel.cloudflare.com\/report\/v3?s=69JmEh320W6ZEebW0LEcfcp5yIpy1j2POKeH1clkbIYsdoI5dzkAQaT3mlzWUhywEc%2BlWJaOav7w7Nkpih7KjqGTw1iNuXDJP8hW3XEQCYbeRwApdYJhLcNiFxz5lwv80eaRxHzL%2BHw%3D”}],”group”:”cf-nel”,”max_age”:604800}
    server: cloudflare
    x-content-type-options: nosniff
    x-frame-options: SAMEORIGIN
    x-powered-by: PHP/7.3.17
    x-robots-tag: noindex

    REQUEST HEADERS
    :authority: website.com
    :method: POST
    :path: /wp-admin/admin-ajax.php
    :scheme: https
    accept: text/html, */*; q=0.01
    accept-encoding: gzip, deflate, br
    content-length: 4193
    content-type: application/x-www-form-urlencoded; charset=UTF-8
    cookie: wordpress_sec_b4fe821efdc15065f6b79267f897687a=2blackcats%7C1638016188%7CSoI8lDyJqx9aenMlzh7zXYeXBVynQiWbAQEfBbNnQb3%7Cd14db541c0a816bf7a5e7790828ec86bf2219b1fa4942574b98b3273fd9d2c37; cookie_notice_accepted=true; wordpress_test_cookie=WP+Cookie+check; wf_loginalerted_e90382b19f9a88c818cc8b60be70d049c9296936c5136711f5629e949ec5216b=de4d5c8eed3474da4a0c0b3a61b7af7594ae579354b6953fc97ff0c7323e978d; tk_ai=woo%3AVaKJBOzyHQy6wVXfl1gpC%2BRx; wp-settings-1=libraryContent%3Dbrowse%26editor%3Dtinymce%26hidetb%3D0%26posts_list_mode%3Dlist%26mfold%3Do; wp-settings-time-1=1631521670; PHPSESSID=38r594olliiir38pbhmd78ph9p; SESSnsl=nsl619f817f76fd91.61683370; wordpress_logged_in_b4fe821efdc15065f6b79267f897687a=2blackcats%7C1638016188%7CSoI8lDyJqx9aenMlzh7zXYeXBVynQiWbAQEfBbNnQb3%7C9c8f482a9c2dfaea3d90822e18add6624fc8450bbfd197e0dbdf27cd784446e0; wfwaf-authcookie-c65d495c05f567edb19e998c9a1ec7be=41%7Cother%7Cunfiltered_html%2Cedit_others_posts%2Cupload_files%2Cedit_posts%2Cread%7Ca03235d2d7bc1cc8910b92824fb5f95f3381aa2c516a548420c8993bc79e5478; _ga=GA1.2.162292846.1637845374; _gid=GA1.2.875638186.1637845374; _gat_gtag_UA_71569896_3=1
    origin: https://website.com
    referer: https://website.com/store-manager/payments/
    sec-ch-ua: “Chromium”;v=”94″, “;Not A Brand”;v=”99″
    sec-ch-ua-mobile: ?0
    sec-ch-ua-platform: “Windows”
    sec-fetch-dest: empty
    sec-fetch-mode: cors
    sec-fetch-site: same-origin
    user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.114 Safari/537.36
    x-requested-with: XMLHttpRequest

    FORM DATA
    action: wcfm_generate_variation_attributes
    wcfm_products_manage_form: product_type=simple&pro_title=&product_url=&button_text=&regular_price=&sale_price=&sale_date_from=&sale_date_upto=&product_tags=&featured_img=&gallery_img%5B0%5D%5Bgimage%5D=&excerpt=&description=&pro_id=0&sku=&stock_qty=0&backorders=no&stock_status=instock&downloadable_files%5B0%5D%5Bname%5D=&downloadable_files%5B0%5D%5Bfile%5D=&downloadable_files%5B0%5D%5Bid%5D=&download_limit=&download_expiry=&weight=&length=&width=&height=&shipping_class=_no_shipping_class&_wcfmmp_processing_time=&attributes%5B0%5D%5Bterm_name%5D=&attributes%5B0%5D%5Bname%5D=&attributes%5B0%5D%5Bvalue%5D=&attributes%5B0%5D%5Btax_name%5D=&attributes%5B0%5D%5Bis_taxonomy%5D=&attributes%5B1%5D%5Bterm_name%5D=pa_color&attributes%5B1%5D%5Bname%5D=color&attributes%5B1%5D%5Btax_name%5D=pa_color&attributes%5B1%5D%5Bis_taxonomy%5D=1&wcfm_attribute_taxonomy=add_attribute&default_attributes_hidden=&variations_options=&variations%5B0%5D%5Bid%5D=&variations%5B0%5D%5Benable%5D=enable&variations%5B0%5D%5Bimage%5D=&variations%5B0%5D%5Bregular_price%5D=&variations%5B0%5D%5Bsale_price%5D=&variations%5B0%5D%5Bsale_price_dates_from%5D=&variations%5B0%5D%5Bsale_price_dates_to%5D=&variations%5B0%5D%5Bstock_qty%5D=&variations%5B0%5D%5Bbackorders%5D=no&variations%5B0%5D%5Bsku%5D=&variations%5B0%5D%5Bstock_status%5D=instock&variations%5B0%5D%5Battributes%5D=&sort_index=9&wcfm_policy_tab_title=Terms%20%26%20Conditions&wcfm_shipping_policy=%3Cp%3EThe%20sales%20price%20of%20all%20my%20prints%20include%20post%20and%20packaging%20for%20delivery%20within%20the%20UK.%3C%2Fp%3E%3Cp%3EPlease%20contact%20me%20if%20you%20would%20like%20to%20arrange%20shipping%20to%20another%20country%20and%20I%20will%20let%20you%20know%20the%20shipping%20costs.%3C%2Fp%3E%3Cp%3EI%20will%20dispatch%20all%20ordered%20products%20usually%20within%2010%20working%20days.%20If%20there%20are%20unforeseen%20delays%20I%20will%20contact%20you.%3C%2Fp%3E%3Cp%3EProducts%20will%20be%20packaged%20in%20appropriate%20protective%20packaging%20so%20your%20print%20will%20arrive%20in%20excellent%20condition.%C2%A0%3C%2Fp%3E%3Cp%3EAll%20my%20packaging%20has%20been%20sourced%20using%20local%20and%20recyclable%20materials%20where%20possible.%C2%A0%3C%2Fp%3E&wcfm_refund_policy=%3Cp%3E%3Cbr%3E%3C%2Fp%3E&wcfm_cancellation_policy=%3Cp%3EI%20hope%20that%20you%20will%20enjoy%20my%20drawings%20as%20much%20as%20I%20enjoyed%20creating%20them.%20like%20my%20work.%3C%2Fp%3E%3Cp%3EIf%20anything%20has%20gone%20wrong%2C%20I%20accept%20returns%20up%20to%2010%20working%20days%20after%20delivery%2C%20if%20the%20item%20is%20in%20its%20original%20condition.%20I%20will%20refund%20the%20full%20order%20amount%20minus%20the%20shipping%20costs%20for%20the%20return.%C2%A0%3C%2Fp%3E%3Cp%3EIn%20the%20event%20that%20your%20order%20arrives%20damaged%20in%20any%20way%2C%20please%20email%20me%20as%20soon%20as%20possible%20with%20your%20order%20number%20and%20a%20photo%20of%20the%20item%E2%80%99s%20condition.%20I%20will%20work%20with%20you%20to%20resolve%20the%20problem.%C2%A0%C2%A0%3C%2Fp%3E%3Cp%3EIf%20you%20have%20any%20further%20questions%2C%20please%20don’t%20hesitate%20to%20contact%20me.%C2%A0%3C%2Fp%3E&wcfm_nonce=b3f07d47ec
    wcfm_ajax_nonce: cb058f641f

    Plugin Author WC Lovers

    (@wclovers)

    FORM DATA
    draw: 1
    columns[0][data]: 0
    columns[0][name]:
    columns[0][searchable]: true
    columns[0][orderable]: false
    columns[0][search][value]:
    columns[0][search][regex]: false

    order[0][column]: 0
    order[0][dir]: asc
    start: 0
    length: 25
    search[value]:
    search[regex]: false
    action: wcfm_ajax_controller
    controller: wcfm-payments
    start_date:
    end_date:
    status_type: completed
    wcfm_ajax_nonce: cb058f641f

    Are you receiving any response for this Ajax request?

    Are you getting 403 only for this Ajax request? Others are working properly?

    Thread Starter dzseti

    (@dzseti)

    All other ajax requests return 200 OK responses

    Turns out that this was being blocked by Wordfence: “blocked by firewall for WAF-RULE-417”

    I guess others could be blocked similarly and maybe WCFM should check this out with Wordfence, although for me it’s “problem solved”. Thanks for your patience

    Plugin Author WC Lovers

    (@wclovers)

    Ok, thanks for the update. We will talk to that plugin support.

Viewing 7 replies - 1 through 7 (of 7 total)
  • The topic ‘DataTables warning: table id=wcfm-payments (& wcfm_withdrawals)’ is closed to new replies.