Hacked Buy Now Button On Mobile

  • Resolved sergey9921

    (@sergey9921)


    5 years, 1 month ago

    Not sure how this happened or who did it but it seems that my test website has altered. The only connected payment gateway I have is stripe and it is in Test Mode only, but when I’m logged in on Android with Chrome I now get a Buy Now button on product pages along with the add to cart and it asks me to pay with Google Pay with an official popup, this is a test website and I haven’t added actual payments yet myself. On desktop there are also some missing icons and so on that are replaced with random symbols and letters. Any suggestions on where I should start to look, and how I would go about fixing this.

    Link is https://ahiassassin.com/product/avet-hx-series-reels/

    Here’s the status if that is relevant. 

    
### WordPress Environment ###

WordPress address (URL): https://ahiassassin.com
Site address (URL): https://ahiassassin.com
WC Version: 3.9.0
REST API Version: ? 1.0.6
Log Directory Writable: ?
WP Version: 5.3.2
WP Multisite: –
WP Memory Limit: 256 MB
WP Debug Mode: –
WP Cron: ?
Language: en_US
External object cache: –

### Server Environment ###

Server Info: Apache
PHP Version: 7.0.33-0+deb9u6 - We recommend using PHP version 7.2 or above for greater performance and security. How to update your PHP version
PHP Post Max Size: 64 MB
PHP Time Limit: 0
PHP Max Input Vars: 1000
cURL Version: 7.52.1
OpenSSL/1.0.2u

SUHOSIN Installed: –
MySQL Version: 5.5.39-MariaDB-2-log
Max Upload Size: 64 MB
Default Timezone is UTC: ?
fsockopen/cURL: ?
SoapClient: ?
DOMDocument: ?
GZip: ?
Multibyte String: ?
Remote Post: ?
Remote Get: ?

### Database ###

WC Database Version: 3.9.0
WC Database Prefix: wp_
Total Database Size: 119.52MB
Database Data Size: 82.02MB
Database Index Size: 37.50MB
wp_woocommerce_sessions: Data: 0.03MB + Index: 0.02MB + Engine InnoDB
wp_woocommerce_api_keys: Data: 0.02MB + Index: 0.03MB + Engine InnoDB
wp_woocommerce_attribute_taxonomies: Data: 0.02MB + Index: 0.02MB + Engine InnoDB
wp_woocommerce_downloadable_product_permissions: Data: 0.02MB + Index: 0.06MB + Engine InnoDB
wp_woocommerce_order_items: Data: 0.02MB + Index: 0.02MB + Engine InnoDB
wp_woocommerce_order_itemmeta: Data: 0.05MB + Index: 0.03MB + Engine InnoDB
wp_woocommerce_tax_rates: Data: 0.02MB + Index: 0.06MB + Engine InnoDB
wp_woocommerce_tax_rate_locations: Data: 0.02MB + Index: 0.03MB + Engine InnoDB
wp_woocommerce_shipping_zones: Data: 0.02MB + Index: 0.00MB + Engine InnoDB
wp_woocommerce_shipping_zone_locations: Data: 0.02MB + Index: 0.03MB + Engine InnoDB
wp_woocommerce_shipping_zone_methods: Data: 0.02MB + Index: 0.00MB + Engine InnoDB
wp_woocommerce_payment_tokens: Data: 0.02MB + Index: 0.02MB + Engine InnoDB
wp_woocommerce_payment_tokenmeta: Data: 0.02MB + Index: 0.03MB + Engine InnoDB
wp_woocommerce_log: Data: 0.02MB + Index: 0.02MB + Engine InnoDB
wp_commentmeta: Data: 0.02MB + Index: 0.03MB + Engine InnoDB
wp_comments: Data: 1.02MB + Index: 0.92MB + Engine InnoDB
wp_duplicator_packages: Data: 0.02MB + Index: 0.02MB + Engine InnoDB
wp_imagify_files: Data: 0.02MB + Index: 0.08MB + Engine InnoDB
wp_imagify_folders: Data: 0.02MB + Index: 0.03MB + Engine InnoDB
wp_links: Data: 0.02MB + Index: 0.02MB + Engine InnoDB
wp_options: Data: 5.44MB + Index: 0.48MB + Engine InnoDB
wp_postmeta: Data: 54.47MB + Index: 29.94MB + Engine InnoDB
wp_posts: Data: 15.11MB + Index: 3.42MB + Engine InnoDB
wp_revslider_css: Data: 0.13MB + Index: 0.00MB + Engine InnoDB
wp_revslider_css_bkp: Data: 0.02MB + Index: 0.00MB + Engine InnoDB
wp_revslider_layer_animations: Data: 0.02MB + Index: 0.00MB + Engine InnoDB
wp_revslider_layer_animations_bkp: Data: 0.02MB + Index: 0.00MB + Engine InnoDB
wp_revslider_navigations: Data: 0.02MB + Index: 0.00MB + Engine InnoDB
wp_revslider_navigations_bkp: Data: 0.02MB + Index: 0.00MB + Engine InnoDB
wp_revslider_sliders: Data: 0.19MB + Index: 0.00MB + Engine InnoDB
wp_revslider_sliders_bkp: Data: 0.02MB + Index: 0.00MB + Engine InnoDB
wp_revslider_slides: Data: 3.05MB + Index: 0.00MB + Engine InnoDB
wp_revslider_slides_bkp: Data: 0.02MB + Index: 0.00MB + Engine InnoDB
wp_revslider_static_slides: Data: 0.02MB + Index: 0.00MB + Engine InnoDB
wp_revslider_static_slides_bkp: Data: 0.02MB + Index: 0.00MB + Engine InnoDB
wp_taxjar_record_queue: Data: 0.02MB + Index: 0.02MB + Engine InnoDB
wp_termmeta: Data: 0.06MB + Index: 0.06MB + Engine InnoDB
wp_terms: Data: 0.02MB + Index: 0.03MB + Engine InnoDB
wp_term_relationships: Data: 0.41MB + Index: 0.17MB + Engine InnoDB
wp_term_taxonomy: Data: 0.02MB + Index: 0.03MB + Engine InnoDB
wp_tfwctool_wishlist_items: Data: 0.02MB + Index: 0.00MB + Engine InnoDB
wp_tfwctool_wishlist_lists: Data: 0.02MB + Index: 0.00MB + Engine InnoDB
wp_usermeta: Data: 0.02MB + Index: 0.03MB + Engine InnoDB
wp_users: Data: 0.02MB + Index: 0.05MB + Engine InnoDB
wp_wcpdf_invoice_number: Data: 0.02MB + Index: 0.00MB + Engine InnoDB
wp_wc_admin_notes: Data: 0.02MB + Index: 0.00MB + Engine InnoDB
wp_wc_admin_note_actions: Data: 0.02MB + Index: 0.02MB + Engine InnoDB
wp_wc_category_lookup: Data: 0.02MB + Index: 0.00MB + Engine InnoDB
wp_wc_customer_lookup: Data: 0.02MB + Index: 0.03MB + Engine InnoDB
wp_wc_download_log: Data: 0.02MB + Index: 0.03MB + Engine InnoDB
wp_wc_order_coupon_lookup: Data: 0.02MB + Index: 0.03MB + Engine InnoDB
wp_wc_order_product_lookup: Data: 0.02MB + Index: 0.06MB + Engine InnoDB
wp_wc_order_stats: Data: 0.02MB + Index: 0.05MB + Engine InnoDB
wp_wc_order_tax_lookup: Data: 0.02MB + Index: 0.03MB + Engine InnoDB
wp_wc_product_meta_lookup: Data: 0.50MB + Index: 1.09MB + Engine InnoDB
wp_wc_tax_rate_classes: Data: 0.02MB + Index: 0.02MB + Engine InnoDB
wp_wc_webhooks: Data: 0.02MB + Index: 0.02MB + Engine InnoDB
wp_yith_wapo_groups: Data: 0.02MB + Index: 0.00MB + Engine InnoDB
wp_yith_wapo_types: Data: 0.02MB + Index: 0.00MB + Engine InnoDB
wp_yith_wcwl: Data: 0.20MB + Index: 0.08MB + Engine InnoDB
wp_yith_wcwl_lists: Data: 0.30MB + Index: 0.34MB + Engine InnoDB
wp_za_add_ons: Data: 0.02MB + Index: 0.00MB + Engine InnoDB
wp_za_categories_to_groups: Data: 0.02MB + Index: 0.00MB + Engine InnoDB
wp_za_groups: Data: 0.02MB + Index: 0.00MB + Engine InnoDB
wp_za_products_to_groups: Data: 0.02MB + Index: 0.00MB + Engine InnoDB
wp_za_types: Data: 0.02MB + Index: 0.00MB + Engine InnoDB
wp_za_values: Data: 0.02MB + Index: 0.00MB + Engine InnoDB

### Post Type Counts ###

attachment: 4407
custom_css: 3
customize_changeset: 39
elementor_library: 14
elementor-hf: 1
fpf_fields: 3
nav_menu_item: 186
page: 21
post: 1
product: 489
product_variation: 4703
revision: 140
scheduled-action: 1511
shop_coupon: 1
shop_order: 9
shop_order_refund: 5
static_block: 14
wafs: 1
was: 9
wpcf7_contact_form: 1

### Security ###

Secure connection (HTTPS): ?
Hide errors from visitors: ?

### Active Plugins (23) ###

Redux Framework: by Team Redux – 3.6.17
Contact Form 7: by Takayuki Miyoshi – 5.1.6
Duplicator: by Snap Creek – 1.3.24
Electro Extensions: by MadrasThemes – 2.4.4 – Not tested with the active version of WooCommerce
Envato Market: by Envato – 2.0.3
Flexible Product Fields Pro: by WP Desk – 1.4.4
Flexible Product Fields: by WP Desk – 1.2.10
Imagify: by WP Media – 1.9.8.1
WPBakery Page Builder: by Michael M - WPBakery.com – 6.0.5
Kadence WooCommerce Email Designer: by Kadence WP – 1.3.11 – Not tested with the active version of WooCommerce
Regenerate Thumbnails: by Alex Mills (Viper007Bond) – 3.1.2
Slider Revolution: by ThemePunch – 6.1.3
TaxJar - Sales Tax Automation for WooCommerce: by TaxJar – 3.0.12
WooCommerce Tools: by ThemeFarmer – 1.2.4 – Not tested with the active version of WooCommerce
WooCommerce Admin: by WooCommerce – 0.24.0 – Not tested with the active version of WooCommerce
WooCommerce Advanced Shipping: by Jeroen Sormani – 1.0.14 – Not tested with the active version of WooCommerce
WooCommerce Stripe Gateway: by WooCommerce – 4.3.1 – Not tested with the active version of WooCommerce
WooCommerce PDF Invoices & Packing Slips: by Ewout Fernhout – 2.4.3
WooCommerce Product CSV Import Suite: by WooCommerce – 1.10.31
WooCommerce: by Automattic – 3.9.0
WP Rocket: by WP Media – 3.4.4
YITH WooCommerce Compare: by YITH – 2.3.18
YITH WooCommerce Wishlist: by YITH – 3.0.5

### Inactive Plugins (0) ###

### Dropin Plugins (1) ###

advanced-cache.php: advanced-cache.php

### Settings ###

API Enabled: –
Force SSL: –
Currency: USD ($)
Currency Position: left
Thousand Separator: ,
Decimal Separator: .
Number of Decimals: 2
Taxonomies: Product Types: external (external)
grouped (grouped)
simple (simple)
variable (variable)

Taxonomies: Product Visibility: :: (293)
'-1 (1)
""}}""}}"::""file"":""""}}""}}" (file)
exclude_from_catalog (exclude_from_catalog)
exclude_from_search (exclude_from_search)
exclude-from-catalog (exclude-from-catalog)
exclude-from-search (exclude-from-search)
featured (featured)
outofstock (outofstock)
rated-1 (rated-1)
rated-2 (rated-2)
rated-3 (rated-3)
rated-4 (rated-4)
rated-5 (rated-5)

Connected to WooCommerce.com: ?

### WC Pages ###

Shop base: #3853 - /shop/
Cart: #3134 - /cart-2/
Checkout: #3135 - /checkout-3/
My account: #3854 - /my-account-2/
Terms and conditions: #2183 - /terms-and-conditions/

### Theme ###

Name: Electro Child
Version: 2.4.4
Author URL: https://madrasthemes.com/
Child Theme: ?
Parent Theme Name: Electro
Parent Theme Version: 2.4.4
Parent Theme Author URL: https://madrasthemes.com/
WooCommerce Support: ?

### Templates ###

Overrides: electro/woocommerce/archive-product.php
electro/woocommerce/global/quantity-input.php

### Action Scheduler ###

Complete: 1,494
Oldest: 2019-12-27 21:36:37 +0000
Newest: 2020-01-27 19:51:49 +0000

Pending: 1
Oldest: 2020-01-27 20:51:50 +0000
Newest: 2020-01-27 20:51:50 +0000

Canceled: 2
Oldest: 2020-01-27 19:32:54 +0000
Newest: 2020-01-27 19:32:54 +0000

In-progress: 0
Oldest: –
Newest: –

Failed: 14
Oldest: 2019-12-06 17:33:43 +0000
Newest: 2019-12-06 17:33:43 +0000
    • This topic was modified 5 years, 1 month ago by sergey9921.

    The page I need help with: [log in to see the link]

Viewing 2 replies - 1 through 2 (of 2 total)

  • Hi @sergey9921,

    Do you happen to have the Payment Request Buttons enabled in your WooCommerce Stripe settings?
    You can see what I’m referring to here: https://d.pr/i/zhYceL

    Thank you,
    Joey

    Thread Starter sergey9921

    (@sergey9921)

    Looks like that was it, I don’t remember ever enabling the setting and it hasn’t appeared in the past 2 months that stripe has been in test mode while I’ve been using my phone. Maybe I overreacted a bit since I saw some strange activity in the server logs with someone trying to brute force wp-login.php and then POSTs to xmlrpc.php from a bunch of foreign IP’s.

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Hacked Buy Now Button On Mobile’ is closed to new replies.