Be careful and don’t trust fake positive reviews!!!

  • webbymasterru

    (@webbymasterru)


    8 months ago

    ATTENTION!
    Be careful!
    The document-emberdder.2.0.0.zip plugin archive contains /document-emberdder/freemius – Freemius!!!
    After installing the plugin, it creates the wp_fs_logger table.
    This table quickly fills with logs up to 3GB or more, which drastically slows down the site, both in the admin panel and on the frontend.
    Be careful and don’t trust fake positive reviews!!!

Viewing 6 replies - 1 through 6 (of 6 total)
  • Plugin Author Abu Hayat

    (@abuhayat)

    8 months ago

    @webbymasterru Thanks for the bug report,
    We are going to fix the issues ASAP and getting back to you soon.

    Please note we recently added freemius sdk to this plugin, and we never knew that freemius sdk has a bugs, we will also report this to freemius.com and we hope you will get a fix soon.

    Thanks again for helping us improving the product.

    Best,

    Hayat

    • This reply was modified 8 months ago by Abu Hayat.
    Thread Starter webbymasterru

    (@webbymasterru)

    8 months ago

    Simply deleting the /freemius directory from the plugin doesn’t solve the problem. The database crashes, and the frontend displays a “Database connection error.” This indicates a massive database corruption. I haven’t fully verified where else Freemius is being injected, but if it’s corrupting the database, I suspect it’s site-wide.
    After clearing the wp_fs_logger table itself, it’s recreated, already populated (about 1.9GB).

    After reverting to your plugin version 1.8.9, the wp_fs_logger table was no longer created. Incidentally, at the time of the plugin version change, it was 5.7GB (!)
    It’s possible that you had purely good intentions when creating your plugin, and I’m even sure that’s true, but third-party add-ons shouldn’t make it unusable due to their corruption.

    The Freemius add-on itself doesn’t appear in the console, but their APIs (local ones, at that) are listed in the /freemius config, which is certainly concerning. This, I think, explains the populated wp_fs_logger table after it’s cleared.

    Basically, if you think Freemius should be mentioned as your friend and partner, it should be there and point to their app in the repository, but their app and add-on shouldn’t be running surreptitiously in your shell.

    And your plugin is a great idea and implementation, for which I thank you very much. But there’s a saying: “Trust, but verify.”

    Leo Fajardo

    (@leorw)

    8 months ago

    Hi @webbymasterru,

    This is Leo from Freemius. Thank you for sharing your feedback!

    The situation you described can only happen when the SDK’s debug mode is enabled. To turn it off, just head over to /wp-admin/admin.php?page=freemius on your site (for multisite, /wp-admin/network/admin.php?page=freemius) and toggle the on/off switch at the top. Once it’s turned off, the fs_logger table will be automatically removed.

    We’ve actually improved this mechanism so that debug mode now turns off automatically 24 hours after being enabled. You can find more details here:
    https://github.com/Freemius/wordpress-sdk/releases/tag/2.8.0

    If it happens to stay on for longer on your site, that would be an edge case, and we’d be happy to take a closer look. Just let us know if that’s the case, and if there’s anything else I can help with!

    Thread Starter webbymasterru

    (@webbymasterru)

    8 months ago

    The thing is, I don’t use Freemius on my website, and after installing document-emberdder.2.0.0, no Freemius settings page was created.
    I probably would have found some Freemius-related settings, but there weren’t any.

    Leo Fajardo

    (@leorw)

    8 months ago

    Thank you for the information, @webbymasterru. Could you clarify further what happens on your end when you visit <your_site_home_url>/wp-admin/admin.php?page=freemius while the “document-emberdder 2.0.0” plugin is activated?

    Plugin Author Tanin Rahman

    (@taninrahman)

    8 months ago

    Hi @webbymasterru ,

    Thank you so much for your detailed feedback — and also thanks to Leo from Freemius for clarifying the situation.

    Just to confirm, our plugin doesn’t enable the Freemius SDK’s debug mode by default. In rare cases, something in the site environment (for example, another plugin using Freemius or a debug flag left on) might trigger it, which can cause the wp_fs_logger table to grow.

    As Leo mentioned, you can easily turn it off by visiting:
    /wp-admin/admin.php?page=freemius
    (or /wp-admin/network/admin.php?page=freemius on multisite)
    and toggling the debug switch off — this will automatically remove the logging table.

    We’re also taking extra steps in the next update to make sure this never happens again, even accidentally.

    Thanks again for your patience and for bringing this to our attention — your report really helps us improve the plugin for everyone.

    Best regards,
    Tanin Rahman
    Developer of Document Embedder

Viewing 6 replies - 1 through 6 (of 6 total)

The topic ‘Be careful and don’t trust fake positive reviews!!!’ is closed to new replies.