[Mark]

They uploaded this file that contained php:
103.148.77.171 – – [24/May/2021:09:14:13 -0700] “GET /wp-content/uploads/ppom_files/o_1f6fifd5v8op1ug85evcap1mhs9.jpg?nocache=1621872853 HTTP/2.0” 200 6196 “website.com/product/productname/” “Mozilla/5.0 (Windows NT 10.0; WOW64; rv:48.0) Gecko/20100101 Firefox/48.0”

[Mark]

Here is the start of the attack.
103.148.77.171 – – [24/May/2021:09:14:13 -0700] “POST /wp-admin/admin-ajax.php HTTP/2.0” 200 652 “website.com/product/productname/” “Mozilla/5.0 (Windows NT 10.0; WOW64; rv:48.0) Gecko/20100101 Firefox/48.0”

[Mark]

Today I found my CPU at 50%. It was at this level for over 24hrs (so before I found out that PPOM Pro was deactivated). I found it was a process called XMRig. Researched and saw that this was potentially linked to cyrptomining. https://www.wordfence.com/blog/2017/12/massive-cryptomining-campaign-wordpress/

Ran ImunifyAV through Plesk panel and found a file /wp-content/uploads/ppom_files/default.php. They were able to upload this via “POST /wp-admin/admin-ajax.php”.

I also found a folder in the domain root that was named xmrig-6.12.1 and it included a few files apparently to run the XMRig process.

[Mark]

Hi,

Has any improvements been made to discounts in PPOM regarding applying discounts to all products in the cart if they are in the same category?

Thanks.

[Mark]

I can’t. No option to do that. Also, I don’t want people to be able to add their name unless they select the box for adding their name to the product. Otherwise, we’ll get people putting their name their without paying for that option.

[Mark]

It works when you add a character. But it does not work when there are no characters.

[Mark]

It’s not working for me. But maybe it is because the text field only is displayed if a condition is met such as a checkbox. Try it yourself. Select the first two required options, then select add name. The text field is set to minimum character of “1”. But you can add to cart with no characters.

https://ultracornhole.com/product/king-cobra-ultra-bags-set-of-4-bags

• This reply was modified 4 years, 11 months ago by Mark.

[Mark]

Hi,

It is working now. Thank you.

I have noticed one additional problem. For text input, the requirement of “min. Length” set to “1” or any other number is ignored.

[Mark]

Can you explain how the Basic PPOM and the Pro PPOM plugin work together? Can I uninstall the basic plugin now that the Pro version is installed?

If we create a compatibility fix for the PPOM basic, will it apply for the Pro as well?

[Mark]

I have also tried this plug-in but the price is overwritten as well. They do have compatibility code for a different plug-in. Maybe you can make a tweak to this code for PPOM.

add_filter( 'wdp_save_cart_item_keys', function ( $keys ) {
 $keys[] = 'addons';
 return $keys;
});

add_filter("wdp_get_product_price", function($price, $product, $price_mode, $item_meta){
  if( !empty($item_meta["addons"]) ) {
    foreach($item_meta["addons"] as $addon)
      if( !empty($addon["price"]) )
        $price += $addon["price"];
  }
  return $price;
},10,4);

Advanced Dynamic Pricing For Woocommerce (Pro)

https://algolplus.freshdesk.com/support/solutions/articles/25000019237-woocommerce-product-add-ons

• This reply was modified 5 years ago by Mark.

[Mark]

Thank you for working on this. In the mean time, can you look to see if there is a quick fix for having the Dynamic Pricing plug-in apply the discount to the base product and not overriding the final price after the options are added? The Dynamic Pricing plug-in does have a rules execution order.

ELEX Dynamic Pricing and Discounts Plugin for WooCommerce

Maybe it’s better to just piggy back onto this plug-in and get your options pricing working with it. Your discounts could be just applied to the options itself and not to the base price.

[Mark]

Ok, do think it is better to have the ability to discount the base product and the options separately?

For instance, maybe discounts on the base product is category based meaning it can apply discounts to all items in the cart that are in the same category. But the options that are in each line item are discounted differently.

Also, the ability to discount by percentage is desired.

[Mark]

Ok. I’m glad it is a work in progress. Any thoughts on how long this could take? A week? 6 months? I have to figure this out quick, and the current only solution is to drop PPOM. Which is disappointing because I like how flexible it is.

[Mark]

“WC Product Variation Quantity cannot be used with PPOM Price Matrix when Variation prices are set against same product.”

[Author]

Posts