Security Issues

Hey @yward ,

Thank you very much for your message and our apologies for our delayed response here! We’ve seen an increase to our traffic this week – combined with some planned time off for fellow team members – that has unfortunately impacted our response time. Happy to help with your questions.

Regarding our plugin creating two system users with admin privileges, I’m afraid I’m not aware why is this the current experience, but I’d love to find out for you. I’ve reached out to our engineering team and will get back to you as soon as more information is available.

Our plugin currently relies to the creation of the system users for us to track Pixel events more accurately (on the server side) as well as is required to get long-lived access tokens so they don’t expire often, among other things. Here’s a very interesting article offered by Facebook in case you’d like to find more information about system users.

I’ve made sure to ask our team if (and how) these system users can be deleted, so I’ll try to include that in my update, too.

In the meantime, if you have any other concerns or questions, I’d be happy to hear them and get back to you with more information. Would you please let me know if there’s anything else I can help you with?

Best regards,
Pit

Hey @yward ,

This is Pit again. I wanted to let you know that I still haven’t received any new information relevant to your question from our team.

I’ve asked for an update and will let you know as soon as there are more news. I’m sorry for not being able to share any further feedback with you yet.

Let me know if there’s anything else I can do to help you in the meantime.

Best regards,
Pit

Hello @pitbozionelos ,

Thank you for your response and follow up.

– I’d like to clarify that system users are NOT needed to sync the products at ALL, all that and there is no justification for them being there.

As for further issues:
-I uninstalled the plugin and deleted the left overs (except the system user), however I’m not able to reinstall, whenever I try to reinstall it it fails connecting to Facebook similar to what people are facing here: https://www.ads-software.com/support/topic/after-update-cant-reconnect-2/ and in several other issues.

-Also for some reason it led to my page shop being broken/inaccessible from Firefox, it works fine from other browsers but Firefox stopped working after V2.0 update (tried from different devices, same result), I’ve tried everything to no avail, including deleting cataloug and resyncing using old version of the plugin, shop page is still broken and does not work from Firefox

Hey @yward ,

Thank you for taking the time to share your feedback with me. I’ve been able to get some more information as to the use of system users with our plugin.

I’d like to take a moment to clarify that the system users are required for our plugin to work, including the product sync. Since they represent software or servers making API calls, our plugin depends on the information sent by them to accurately communicate with the Facebook API.

That being said, the creation of system users is currently being considered and it’s possible that the Facebook team will make some change to ensure that not multiple users are created. Thanks so much for bringing this up to our attention!

As for the reconnection issue you’ve mentioned – which unfortunately affects other merchants using our plugin as well – you can find more information here on how to install the previous version of our plugin to continue syncing your WooCommerce products to your Facebook Shop.

Would you please let me know if the above are helpful? Anything else I can do to help you in the meantime?

Best regards,
Pit

Hey @yward,

It has been a long time since we heard from you, so I’m going to mark this topic as resolved. If you’re still experiencing issues please take a look at our documentation for more information and create a new thread if you have further questions.

Thanks,
Tamara ??