Tips and Tricks HQ Support Portal › Forums › WP eStore Forum › Multiple purchases appearing without payment
Tagged: hacking, security, upaid purchases
- This topic has 3 replies, 3 voices, and was last updated 10 years, 12 months ago by Peter.
April 2, 2012 at 4:33 pm #5996LarryhirMember
It would appear my client’s site is being hacked. A purchaser purchased and paid for 5 ebooks. Now we are getting more multiple purchases from the same user showing up without any paypal payment. This occurred dozens of times last week for the same initial purchaser and now another purchaser appears to have done the same thing. Is there a security hole? I don’t see any other forum posts about anything like this. How can we troubleshoot?April 3, 2012 at 12:00 am #43667IvyMember
Most of the time this happens when PayPal does not get the correct response from your server when it is sending the IPN, so it sends multiple IPNs until it times out (PayPal is thinking the IPN is failing and not reaching your server). You can read more about this and why the eStore processed each IPN that is sent here:
Note One: This should not be happening if you are using the latest version of the plugin as there are checks to prevent this.
What version of the plugin are you using?
Note Two: Some hosting providers delay their emails and this is very common when using their shared hosting as it does not send the notification that the IPN needs to receive for up to 30 minutes.
For more information on email related problems see the following forum post:
https://support.tipsandtricks-hq.com/forums/topic/not-receiving-emails-even-though-the-plugin-sent-the-emailApril 3, 2012 at 5:17 pm #43668LarryhirMember
Using Version v4.6.3. We haven’t had any issues with other orders until now and others around this time are processing fine. Could it be that this person has ordered more items than normal? …the time out issue that is…
What I see is the same order and transaction number happening on several successive days for four items. So in the customer history, it looks like he has ordered these and paid about 12 times, when in fact they were ordered and paid for once according to paypal.April 3, 2012 at 10:43 pm #43669PeterMember
Your plugin version appears to be quite old.
Please upload and install a fresh copy of the latest version by following the instructions here:
- You must be logged in to reply to this topic.