‘Nonce security check failed.’ with live Stripe

  • Resolved batters22

    (@batters22)


    7 months, 2 weeks ago

    Having issues with Stripe integration on a new site. Working with Stripe in Test mode all is fine.

    With Live Stripe mode after entering payment details, popup window for additional security is displayed OK, but in the majority of tests the payment then fails and the message ‘‘Nonce security check failed.’is displayed. Apparently randomly, three payments out of 11 have gone through OK.

    I have tested this on two sites linked to the same Stripe installation, issue occurs on both sites. One site has no other plugins installed and is running vanilla WordPress with 2024 theme.

    Any suggestions would be welcome.

    EDIT: By observation, on the failures I have created a user and tried to complete a payment at the same time. This fails, but the user is created OK. If I then attempt the payment again it works. I’m theorising that when the WordPress user is successfully created there is a new nonce, hence the nonce will not verify. On the second attempt the user is already logged on and no new nonce is created so the payment completes OK. A number of tests have borne this out – if the user is already logged on when the payment is attempted, it completes. If the user is created at the same time as the payment, it fails.

    • This topic was modified 7 months, 2 weeks ago by batters22. Reason: Further info
Viewing 5 replies - 1 through 5 (of 5 total)
  • Plugin Support Jarryd Long

    (@jarryd-long)

    Hi there, thank you for reaching out to Paid Memberships Pro.

    I have passed this feedback on to our development team for further review and testing.

    In the meantime, would you be able to send me a copy of your Site Health information so that we can have a better understanding of your setup. Feel free to anonymise any data/site names/urls etc if you prefer.

    Your Site Health contains details about your WordPress and PMPro setup which can help us quickly pinpoint possible conflicts or problems that could cause the issue you’re currently experiencing.

    Please follow the steps below to retrieve your Site Health Info in the WordPress admin and reply back to us when the details have been added:

    1. Navigate to Tools > Site Health in the WordPress admin.
    2. Click on the “Info” tab.
    3. Click the button to “Copy site info to clipboard”.

    The entire output of your Site Health is now copied to your clipboard.

    You can then paste it into a reply here.

    Kind Regards,
    Jarryd
    Support Manager at Paid Memberships Pro

    • This reply was modified 7 months, 2 weeks ago by Jarryd Long.
    Thread Starter batters22

    (@batters22)

    Here’s the site health (some details obfuscated)

    ` wp-core

version: 6.5.2
site_language: en_US
user_language: en_US
timezone: +00:00
permalink: /%year%/%monthnum%/%day%/%postname%/
https_status: true
multisite: false
user_registration: 0
blog_public: 1
default_comment_status: open
environment_type: production
user_count: 13
dotorg_communication: true wp-paths-sizes

wordpress_path: /home/xxxxxxxx/public_html/subdomains/dartefacts
wordpress_size: 57.45 MB (60236247 bytes)
uploads_path: /home/xxxxxxxx/public_html/subdomains/dartefacts/wp-content/uploads
uploads_size: 0.00 B (0 bytes)
themes_path: /home/xxxxxxxx/public_html/subdomains/dartefacts/wp-content/themes
themes_size: 12.06 MB (12644953 bytes)
plugins_path: /home/xxxxxxxx/public_html/subdomains/dartefacts/wp-content/plugins
plugins_size: 37.79 MB (39629678 bytes)
database_size: 2.59 MB (2719744 bytes)
total_size: 109.89 MB (115230622 bytes) wp-dropins (1)

maintenance.php: true wp-active-theme

name: Twenty Twenty-Four (twentytwentyfour)
version: 1.0 (latest version: 1.1)
author: the WordPress team
author_website: https://www.ads-software.com
parent_theme: none
theme_features: core-block-patterns, post-thumbnails, responsive-embeds, editor-styles, html5, automatic-feed-links, widgets-block-editor, block-templates, menus
theme_path: /home/xxxxxxxx/public_html/subdomains/dartefacts/wp-content/themes/twentytwentyfour
auto_update: Disabled wp-themes-inactive (2)

Twenty Twenty-Three: version: 1.3, author: the WordPress team (latest version: 1.4), Auto-updates disabled
Twenty Twenty-Two: version: 1.6, author: the WordPress team (latest version: 1.7), Auto-updates disabled wp-plugins-active (2)

Paid Memberships Pro: version: 3.0.2, author: Paid Memberships Pro, Auto-updates disabled
Paid Memberships Pro - Roles Add On: version: 1.4.2, author: Paid Memberships Pro, Auto-updates disabled wp-plugins-inactive (2)

Akismet Anti-spam: Spam Protection: version: 5.3.1, author: Automattic - Anti-spam Team (latest version: 5.3.2), Auto-updates disabled
Hello Dolly: version: 1.7.2, author: Matt Mullenweg, Auto-updates disabled wp-media

image_editor: WP_Image_Editor_Imagick
imagick_module_version: 1692
imagemagick_version: ImageMagick 6.9.12-93 Q16 x86_64 17898 https://legacy.imagemagick.org
imagick_version: 3.7.0
file_uploads: 1
post_max_size: 60M
upload_max_filesize: 60M
max_effective_size: 60 MB
max_file_uploads: 20
imagick_limits:
imagick::RESOURCETYPE_AREA: 250 GB
imagick::RESOURCETYPE_DISK: 9.2233720368548E+18
imagick::RESOURCETYPE_FILE: 196608
imagick::RESOURCETYPE_MAP: 125 GB
imagick::RESOURCETYPE_MEMORY: 63 GB
imagick::RESOURCETYPE_THREAD: 1
imagick::RESOURCETYPE_TIME: 9.2233720368548E+18
imagemagick_file_formats: 3FR, 3G2, 3GP, AAI, AI, APNG, ART, ARW, AVI, AVS, BGR, BGRA, BGRO, BIE, BMP, BMP2, BMP3, BRF, CAL, CALS, CANVAS, CAPTION, CIN, CIP, CLIP, CMYK, CMYKA, CR2, CR3, CRW, CUR, CUT, DATA, DCM, DCR, DCX, DDS, DFONT, DNG, DOT, DPX, DXT1, DXT5, EPDF, EPI, EPS, EPS2, EPS3, EPSF, EPSI, EPT, EPT2, EPT3, ERF, EXR, FAX, FILE, FITS, FLV, FRACTAL, FTP, FTS, G3, G4, GIF, GIF87, GRADIENT, GRAY, GRAYA, GROUP4, GV, H, HALD, HDR, HISTOGRAM, HRZ, HTM, HTML, HTTP, HTTPS, ICB, ICO, ICON, IIQ, INFO, INLINE, IPL, ISOBRL, ISOBRL6, J2C, J2K, JBG, JBIG, JNG, JNX, JP2, JPC, JPE, JPEG, JPG, JPM, JPS, JPT, JSON, K25, KDC, LABEL, M2V, M4V, MAC, MAGICK, MAP, MASK, MAT, MATTE, MEF, MIFF, MKV, MNG, MONO, MOV, MP4, MPC, MPEG, MPG, MRW, MSL, MSVG, MTV, MVG, NEF, NRW, NULL, ORF, OTB, OTF, PAL, PALM, PAM, PANGO, PATTERN, PBM, PCD, PCDS, PCL, PCT, PCX, PDB, PDF, PDFA, PEF, PES, PFA, PFB, PFM, PGM, PGX, PICON, PICT, PIX, PJPEG, PLASMA, PNG, PNG00, PNG24, PNG32, PNG48, PNG64, PNG8, PNM, POCKETMOD, PPM, PREVIEW, PS, PS2, PS3, PSB, PSD, PTIF, PWP, RADIAL-GRADIENT, RAF, RAS, RAW, RGB, RGBA, RGBO, RGF, RLA, RLE, RMF, RW2, SCR, SCT, SFW, SGI, SHTML, SIX, SIXEL, SPARSE-COLOR, SR2, SRF, STEGANO, SUN, SVG, SVGZ, TEXT, TGA, THUMBNAIL, TIFF, TIFF64, TILE, TIM, TTC, TTF, TXT, UBRL, UBRL6, UIL, UYVY, VDA, VICAR, VID, VIDEO, VIFF, VIPS, VST, WBMP, WEBM, WEBP, WMF, WMV, WMZ, WPG, X, X3F, XBM, XC, XCF, XPM, XPS, XV, XWD, YCbCr, YCbCrA, YUV
gd_version: bundled (2.1.0 compatible)
gd_formats: GIF, JPEG, PNG, WebP, BMP, XPM
ghostscript_version: 9.27 wp-server

server_architecture: Linux 4.18.0-372.9.1.1.lve.el8.x86_64 x86_64
httpd_software: LiteSpeed
php_version: 7.4.33 64bit
php_sapi: litespeed
max_input_variables: 1000
time_limit: 30
memory_limit: 128M
admin_memory_limit: 256M
max_input_time: 60
upload_max_filesize: 60M
php_post_max_size: 60M
curl_version: 7.61.1 OpenSSL/1.1.1k
suhosin: false
imagick_availability: true
pretty_permalinks: true
htaccess_extra_rules: true
current: 2024-04-16T05:59:48+00:00
utc-time: Tuesday, 16-Apr-24 05:59:48 UTC
server-time: 2024-04-16T05:59:48+00:00 wp-database

extension: mysqli
server_version: 8.0.36
client_version: mysqlnd 7.4.33
max_allowed_packet: 268435456
max_connections: 200 wp-constants

WP_HOME: undefined
WP_SITEURL: undefined
WP_CONTENT_DIR: /home/xxxxxxxx/public_html/subdomains/dartefacts/wp-content
WP_PLUGIN_DIR: /home/xxxxxxxx/public_html/subdomains/dartefacts/wp-content/plugins
WP_MEMORY_LIMIT: 40M
WP_MAX_MEMORY_LIMIT: 256M
WP_DEBUG: false
WP_DEBUG_DISPLAY: true
WP_DEBUG_LOG: false
SCRIPT_DEBUG: false
WP_CACHE: false
CONCATENATE_SCRIPTS: undefined
COMPRESS_SCRIPTS: undefined
COMPRESS_CSS: undefined
WP_ENVIRONMENT_TYPE: Undefined
WP_DEVELOPMENT_MODE: undefined
DB_CHARSET: utf8mb4
DB_COLLATE: undefined wp-filesystem

wordpress: writable
wp-content: writable
uploads: writable
plugins: writable
themes: writable pmpro

pmpro-cron-jobs: pmpro_cron_expire_memberships (2024-04-16 06:58:18) |
pmpro_cron_expiration_warnings (2024-04-16 06:58:19) |
pmpro_cron_admin_activity_email (2024-04-16 10:30:00) |
pmpro_cron_delete_tmp (2024-04-16 10:30:00) |
pmpro_cron_credit_card_expiring_warnings (2024-04-29 09:58:18) |
pmpro_license_check_key (2024-04-29 09:58:18)
pmpro-gateway: Stripe (Stripe Connect) [stripe:stripe-connect]
pmpro-gateway-env: Live/Production [live]
pmpro-orders: 13 orders
pmpro-discount-codes: 0 discount codes
pmpro-sessions:
session_status: Active
pmpro-membership-levels: {
"1": {
"id": "1",
"name": "Dartefacter",
"description": "",
"confirmation": "",
"initial_payment": 10,
"billing_amount": 0,
"cycle_number": "0",
"cycle_period": "0",
"billing_limit": "0",
"trial_amount": 0,
"trial_limit": "0",
"allow_signups": "1",
"expiration_number": "12",
"expiration_period": "Month",
"formatted_price": "<strong>￡10.00<\/strong> now.",
"formatted_expiration": "Membership expires after 12 Months.",
"meta": {
"stripe_product_id_sandbox": [
"xxxxxxxx"
],
"confirmation_in_email": [
"0"
]
}
},
"3": {
"id": "3",
"name": "Test 3 Daily Membership",
"description": "",
"confirmation": "",
"initial_payment": 7,
"billing_amount": 7,
"cycle_number": "3",
"cycle_period": "Day",
"billing_limit": "0",
"trial_amount": 0,
"trial_limit": "0",
"allow_signups": "1",
"expiration_number": "0",
"expiration_period": "0",
"formatted_price": "￡7.00 every 3 Days<\/strong>.",
"formatted_expiration": "",
"meta": {
"confirmation_in_email": [
"0"
],
"stripe_product_id_sandbox": [
"xxxxxxxx"
]
}
},
"4": {
"id": "4",
"name": "Test fortnightly",
"description": "",
"confirmation": "",
"initial_payment": 10,
"billing_amount": 10,
"cycle_number": "2",
"cycle_period": "Week",
"billing_limit": "0",
"trial_amount": 0,
"trial_limit": "0",
"allow_signups": "1",
"expiration_number": "0",
"expiration_period": "0",
"formatted_price": "￡10.00 every 2 Weeks<\/strong>.",
"formatted_expiration": "",
"meta": {
"confirmation_in_email": [
"0"
],
"stripe_product_id_sandbox": [
"xxxxxxxx"
]
}
},
"5": {
"id": "5",
"name": "Test Expiring Level",
"description": "",
"confirmation": "",
"initial_payment": 1,
"billing_amount": 0,
"cycle_number": "0",
"cycle_period": "0",
"billing_limit": "0",
"trial_amount": 0,
"trial_limit": "0",
"allow_signups": "1",
"expiration_number": "1",
"expiration_period": "Day",
"formatted_price": "￡1.00<\/strong> now.",
"formatted_expiration": "Membership expires after 1 Day.",
"meta": {
"confirmation_in_email": [
"0"
]
}
}
}
pmpro-level-groups: {
"1": {
"id": "1",
"name": "Main Group",
"allow_multiple_selections": "0",
"displayorder": "1",
"level_ids": [
"3",
"4",
"1",
"5"
]
}
}
pmpro-custom-templates:
pmpro-getfile-usage: PMPRO_GETFILE_ENABLED is not set
pmpro-htaccess-cache-usage: Off
pmpro-pages:
account: https://dxxxxxxxx.com/membership-account/
billing: https://dxxxxxxxx.com/membership-account/membership-billing/
cancel: https://dxxxxxxxx.com/membership-account/membership-cancel/
checkout: https://dxxxxxxxx.com/membership-account/membership-checkout/
confirmation: https://dxxxxxxxx.com/membership-account/membership-confirmation/
invoice: https://dxxxxxxxx.com/membership-account/membership-invoice/
levels: https://dxxxxxxxx</strong>.<strong>com/membership-account/membership-levels/
login: https://dxxxxxxxx.com/login/
member_profile_edit: https://dxxxxxxxx.com/membership-account/your-profile/
pmpro-library-conflicts: No library conflicts detected.
pmpro-current-site-url: https://dxxxxxxxx.com
pmpro-recorded-site-url: https://dxxxxxxxx.com
pmpro-pause-mode: Disabled<strong> `
    Plugin Support Jarryd Long

    (@jarryd-long)

    Thank you for your feedback. I’ve shared this with the rest of the team for further review. I’ll provide feedback as soon as I have any.

    Kind Regards,
    Jarryd
    Support Manager at Paid Memberships Pro

    Plugin Support Jarryd Long

    (@jarryd-long)

    Please update to Version 3.0.3 as this contains a fix for the nonce error, and let me know if you are still experiencing issues with this or not?

    Plugin Support Jarryd Long

    (@jarryd-long)

    Because there have not been any recent updates to this topic, we will be changing the status to resolved.

    Kind Regards,
    Jarryd
    Support Manager at Paid Memberships Pro

Viewing 5 replies - 1 through 5 (of 5 total)
  • The topic ‘‘Nonce security check failed.’ with live Stripe’ is closed to new replies.