2bearstudio

@jricketts4 Thank you, Joey for the prompt reply and help.

I tried the same process like you mentioned, hope I could understand how it work. But I never got the same result. My order shows cancelled order and I am not registered as a new customer.

But in this case, the spammer also registered themselves as a customer. This is the part I can’t understand.

The spam order didn’t come back in the last 3 days. I hope it is just random.

Thank you for the advice, @jricketts4.

Here is the spam order:
https://snipboard.io/vIX2D5.jpg

Thank you @fernashes.

The spam order comes from the same hacker (I believe). They all have the same name “bbbbb bbbbb”, same billing address, same domain emails, “[email protected]”, but all these registered under separate user accounts. ALl have random IP addresses all over the map (not the same country).

I don’t mind disabling the order, deleting the spam user accounts. But without knowing what happened and what caused the spam order even going through without triggering PayPal payment actually happen is the biggest question mark in my head.

Thank you @slash1andy.

I believe both plugin works well in my situation. But none is the cause for the spam order & spam user registration.

Personally, I couldn’t skip the payment and bypass the checkout. I don’t understand how the spam order got submitted eventually with new user registration in user database, and submitted order with “Pending payment” status.

Thank you @fernashes for the detailed reply. I did pickup some tips from the post you recommended.

Order notes is empty for those spam orders. So, can’t get any more information from here. I enabled the logging feature, hope to get more information if this happens again.

However, I indeed find something interesting.

There are 2 PayPal payment gateway:
– PayPal Standard – PayPal
– PayPal Checkout

I believe the “PayPal Checkout” payment gateway is added by WooCommerce PayPal checkout plugin, and PayPal Standard is part of WooCommerce.

However, the active payment gateway on this site is “PayPal Standard – PayPal”.

My question is, what’s the difference between these two plugins? and which one should I use?

Thanks!

Thank you for the reply. I believe it is this plugin:

WooCommerce Advanced Quantity
https://codecanyon.net/item/woocommerce-advanced-quantity/11861326

@cocreation, thank you for the followup. It says BackWPUp after 3.3.7 update.

One thing you may like to know is that, after the update, it shows “BackWPup Pro”. But I am not Pro user.

All sites were on BackWPup 3.3.4

PHP versions are:

5.6.27
5.6.32
5.6.33
7.0.12

ver 3.3.4

Okay. Got it sorted out. It is a theme issue. Disable the theme, problems are gone.

Aegon is the name if you have similar issue.

Thank you @ashok Kumar Nath.

You actually brought up another interesting subject.

I saw some say replace “_wp_session_” with “_wc_session_” in “Ignored query stems”, some say just add “_wc_session_”.

Which one is correct?

Thank you @ashok Kumar Nath. Let’s use a real example.

Say if I don’t want to cache checkout page & cart page, beside excluding these pages in page cache, should I exclude these page in database cache as well?

Thank you @destac. I think I just duplicate the settings on both side to make sure it doesn’t interfere with WooCommerce.

I misunderstood the “Include JS & CSS” setting, and disabled it at first try. Apparently, it is required. Hope this helps.