shmoogie007

Forum Replies Created

Viewing 5 replies - 1 through 5 (of 5 total)
  • Forum: Plugins
    In reply to: [Braintree for WooCommerce Payment Gateway] Carding Attack using module to bypass Capcha, checkout email verification
    Thread Starter shmoogie007

    (@shmoogie007)

    1 year ago

    I switched to our backup processor on a different gateway. Problem seems to be this plugin does not verify endpoint, so basically malicious traffic can test cards, without actually going through the checkout, just by urls and scripts. Thus bypassing any kind of checkout security. I do not know if it was ever patched, for its a bit scary to leave running if nobody is watching.

    I have heard the new Woocommerce payments can connect to Braintree but have not verified.

    If you call or email Braintree, they did have different recommended modules, but I cannot find the list and PayPal is folding the support for Braintree into PayPal itself… so no easy link, sorry.

    I have had almost no CC testing since switching plugins, where before it was a daily issue.. feel silly for not switching plugins sooner.

    Forum: Plugins
    In reply to: [Braintree for WooCommerce Payment Gateway] Carding Attack using module to bypass Capcha, checkout email verification
    Thread Starter shmoogie007

    (@shmoogie007)

    1 year, 5 months ago

    Thanks for the help. The problem is strictly with this plugin. I also see other reports of the same thing under the reviews now for this module. Seems there is no verification at the endpoint, which allows malicious traffic to bypass the checkout and still run cards. Basically ignoring any type of checkout security.

    I have had on/off carding issues over the years and basically now looks like all due to using this plugin.

    Braintree themselves are no longer recommending this module, I have switched away from it. Somebody should patch it. Turns out many of the carding problems I have had over the years are due to abuse of this plugin… Since I switched plugins, I have not had 1 issue of testing that general site security couldn’t block.

    Forum: Plugins
    In reply to: [Constant Contact Forms] Constant Contact Forms has experienced issues that may need addressed and functi
    Thread Starter shmoogie007

    (@shmoogie007)

    6 years ago

    Okay, I was not seeing correctly.

    I was looking at the plugin, under plugin, not the main menu. I have found the settings menu and turned on debugging logs.

    The logs are empty at the moment. I will post back if it generated anything or the message comes back?

    Thanks

    Forum: Plugins
    In reply to: [WooCommerce] Woocommerce Bad Support
    shmoogie007

    (@shmoogie007)

    6 years, 4 months ago

    I just went through that, ran into my first need of Woo support in a year + and had to sign up for account on WP and Woo to get a support ticket open. At first I had the same issue.

    Clicked resend the email, figured the 1st one may have timed out. Never got another email but the below solution worked for me.

    I got around it by logging into WP (not woo) site first, than clicking the WP e-mail verification. Than opened a fresh window and navigated to woo support and it worked.

    For some reason it seemed to need me to be logged into WP support first before clicking the email verification to get into woo support.

    Best of luck to you!

    Forum: Plugins
    In reply to: [WooCommerce] How many orders is too many?
    shmoogie007

    (@shmoogie007)

    6 years, 4 months ago

    I have 32k in Woo and have not noticed any slowdowns but would also be interested in the answer or if anyone has seen a slowdown.

    Our developers (which I put a lot of stock in) said Woo can handles hundreds of thousands and would perform as well as Miva or Magento in this facet but don’t think they actually had a woo client with that many.

Viewing 5 replies - 1 through 5 (of 5 total)