prasidhda

Hi @pmpitstop101media ,

Thanks for trying out the plugin.
Would you mind pasting the error message your site is throwing.

If you don’t know how, please refer to this article Debugging in WP

Is it still the issue for you? If not, would you please paste some details about the plugin version, woo version and WP version your site is configured undered?

Hi again @rafaelzrt ,

As I mentioned in the previous comment, the spam orders can be of any combination of user data generated by BOT. So I think there is no 100% guaranty that we can block every spam orders. However, what we can do is MINIMIZE the probability of spam orders.

Suggestion:
This plugin have the ability to block the orders by email domains. You can add any number of suspicious email domains in the plugin setting. Some domains are listed here https://github.com/tsirolnik/spam-domains-list/blob/master/spamdomains.txt.
Additionally, you can find such domains from the spam orders you are getting in your store and add them too.

You can find the setting at WP ADMIN > WooCommerce > Setting > WMFO TAB > Blacklisted Email Domains.
You should each domain in new line in the setting.

I hope this helps you.

Hi @rafaelzrt ,

Thanks for trying out the plugin.

This plugin blocks the users after predefined failed attempts exceeded with the assumption that humans attempted it. It’s pretty normal scenario how customer tries to create fraud attempts manually from the browser.

However when it is BOT attempting the fraud orders, they will try to create the fraud order by changing all params like IP address, name, phone, email, phone etc in every fraud attempt. So, It will be very hard to recognize such fraud patterns.

I am still trying to trying to find out the pattern for BOT fraud orders. I am doing research on that. If you have any idea, please feel free to suggest.

Many Thanks

Hi @prokops,

New update of the plugin has just been updated with the above changes as permanent.

You can update to the new version or leave as it is.

hi @prokops ,

Do you have the access to FTP?
If you have,
Can you remove the type cast from the function “handle_bulk_blacklisting”
Or you can replace the whole function with the following code.

public function handle_bulk_blacklisting( $redirect_to, $action, $post_ids ) {
			if ( 'blacklist-customer' !== $action ) {

                return esc_url_raw( $redirect_to );
			}
			foreach ( $post_ids as $post_id ) {
				$order = wc_get_order( $post_id );

				if ( ! ( $order instanceof WC_Order ) ) {
					continue;
				}

				// Get customer's IP address, billing phone and Email Address.
				$customer = wmfo_get_customer_details_of_order( $order );
				// update the blacklists.
				if ( method_exists( 'WMFO_Blacklist_Handler', 'init' ) ) {
					WMFO_Blacklist_Handler::init( $customer, $order, 'add', 'back' );
				}
			}
			$redirect_to = wp_nonce_url(
				add_query_arg(
					array(
						'bulk_action' => $action,
						'changed'     => count( $post_ids ),
						'ids'         => join( ',', $post_ids ),
					),
					$redirect_to
				),
				'handle_bulk_blacklisting'
			);

			wp_safe_redirect( $redirect_to );
			exit();
		}

It’s in the path woo-manage-fraud-orders/includes/admin/class-wmfo-bulk-blacklist.php and line 56.

Please let me know if it helps.

• This reply was modified 3 years, 2 months ago by prasidhda.

Hi @prokops ,

Are you using other plugins which are adding actions in “Bulk” option?

Hi @vaperiyadh2,

There is a new version 2.5.3 resolving some fixes related to bulk blacklisting.
Please try that and I hope it helps for you.

https://www.ads-software.com/support/topic/fatal-error-when-bulk-printing/#post-15266863

I am marking this thread as “Resolved” now. Please let me know if your issue still persist.

Hi @betagoo ,

Thanks for pointing out the issue.
There was compatibility issue with other third party plugins using the “Bulk actions”. This issue has been fixed in the latest version 2.5.3. Please update the plugin and let me know if this fixes your problem.

Thanks

Hi @prokops,

Thanks for pointing out the issue.
There was compatibility issue with other third party plugins using the “Bulk actions”. This issue has been fixed in the latest version 2.5.3. Please update the plugin and let me know if this fixes your problem.

Thanks

Hi @thomas-kurz ,

Thanks for trying out the plugin.
You can customize the message shown to the customer from plugin setting. The setting can be found at WP Admin >> WooCommerce >> Settings >> WMFO tab.

I hope it helps.

Hi @nextbracket ,

I am afraid there is no such functionalities to block temporarily.
It is only possible manually adding customer details to block list for time you want customers to be blocked and removing the details later on.

Hi @heatherdnewton ,

There are two kind of log system.

1. WMFO -> Blocked Logs : This is the list of order placement attempts but blocked by the plugin. This log records are only viewing purpose.
2. WMFO -> Fraud attempt logs: This is the list of order placement attempts resulting as “Failed” order status. This log is very important. For particular customer, if the number of failed attempts exceeds the “allowed fraud attempt” in the setting, that customer will be blocked from future order placements.

So, even if you remove the customer details from the blacklist, they can be blocked if their matching details have sufficient fraud attempts.

FYI, I tried to replicate the issues with the same exact cases you mentioned above and I found no issues at all.

So I would like to request to clear all the records from “WMFO -> Fraud attempt logs” as well and check.

Please let me know if it solves your issue.

Hi @heatherdnewton ,

Which plugin you are using for disabling the address fields? Can you paste the shop page or the screenshot of checkout page?

And, would you please check the fraud attempts log from WP Admin >> WMFO >> Fraud attempt logs and clear them if necessary.

Hi @wiresandwifi ,

This issue has been fixed in version 2.5.2. Please update to the latest version and let me know if it works for you.

Thanks for the patience.