sonic1243

Cool, thank you 🙂

Thanks Sai.. yes these “£0.00” customers show up under Users.

We’ve had problems with ‘card testing’ through the paypal plugin so are vigilant for that..

But yes maybe I’ll hide these non-orders with a snippet or something. (You don’t happen to have a snippet do you?!)

Google AI suggested this, but it DID NOT WORK:

add_filter( 'woocommerce_my_account_my_orders_query', 'exclude_pending_payment_from_my_account', 10, 1 );

function exclude_pending_payment_from_my_account( $args ) {
    $statuses = wc_get_order_statuses();
    unset( $statuses['wc-pending'] ); // Change 'wc-pending' for other statuses
    $args['status'] = array_keys( $statuses );
    return $args;
}

And I tried a few via Google AI of which none worked.

Thank you ….

It’s gone quiet again here, for 4 weeks .. so… will mark it resolved for now. TY 🙂

Just to conclude, I have a working ‘fix’ in place thanks to denialdesign: https://www.denialdesign.co.uk/blocking-card-testing-attacks-in-woocommerce/

See this thread on the PayPal Payments plugin for further discussion: https://wordpress.org/support/topic/attacked-by-card-testing-origin-unknown/

Thanks.. I tried wc_endpoint_v1 which did not work, had 40 failed orders over the day..
Am trying the wc_endpoint function as well now.
I didn’t have logging for the Paypal plugin, but I have enabled this now.

Thanks lub, that post has been updated today and it says “the issue is in the Paypal woocommerce plugin” and provides a way to manually edit the core files…. I might try this…. but I will start a thread on the “PayPal Payments” plugin support as that’s who needs to see this. Cheers.