Support » Plugin: WP RSS Aggregator » Virus ? Why “Data transfered from staticxx.facebook.com”

  • Resolved erisal

    (@erisal)


    Hi,
    Whenever a user or me log in or log out to my site, there is access to staticxx.facebook.com? Does your plugin contain a virus?

Viewing 15 replies - 1 through 15 (of 20 total)
  • erisal

    (@erisal)

    I believe I have identified that these unwanted accesses come from your “WP RSS Aggregator – Excerpts and Thumbnails” plugin

    Plugin Contributor Xedin Unknown

    (@xedinunknown-1)

    Hi erisal,

    The domain staticxx.facebook.com is used by Facebook for cross-domain concerns, and therefore is not associated with a virus. Still, if this is a concern for you, could you please expand on the following, in order to give us more information to go on?

    1. What do you mean by “there is access”? Access from where?
    2. How have you determined that the WP RSS Aggregator – Excerpts & Thumbnails plug-in is responsible for this?

    Please open a ticket by using this contact form.

    erisal

    (@erisal)

    Hi,

    When connect or disconnect, in the left bottom of the navigator I see (tranfert data form staticxx.facebook.com. If I desactivate WP RSS Aggregator – Excerpts & Thumbnails plug-in, this doesn’t appear. If I activate it, I see again this access. All plugins are desactivate.
    I don’t see the report and that’s why I’m suspicious.

    • This reply was modified 1 year ago by  erisal.
    Plugin Contributor Xedin Unknown

    (@xedinunknown-1)

    erisal,

    Unfortunately, we are unable to reproduce your issue. In order to address it, we would need a way to reproduce or at least witness it, so something like a screencast where we can see the problem could be very helpful. Please use the contact form from my previous reply to open a ticket in our premium support channel, an our engineers will look into it.

    erisal

    (@erisal)

    Hi,
    I did a thorough analysis in order to bring more precise elements. I also used the Firefox network monitor. I realized my tests with several RSS feeds sources.
    Several access to Facebook appears in the Firefox network monitor each time a page containing the [wp-rss-aggregator] shortcode is refreshed. So you should therefore have no trouble seeing these accesses yourself.
    However, these accesses appear when the “WP RSS Aggregator – Excerpts and Thumbnails” add-on is enabled even though the “Enable excerpts” and “Enable thumbnails” options are not enabled in the “WP RSS Aggregator” settings.
    I realized the same tests with the free plugin “RSS FEED WIDGET” (which displays the extract and an image) and at no time did I find an access to Facebook.
    I took the trouble to do this work so that you can see for yourself the problem so please avoid the kind of answer like the one above. Take the time to make your own checks and then come back to share your findings.

    Plugin Author Mark Zahra

    (@markzahra)

    Hi @erisal, given that this issue is related to a premium add-on, please use the contact form linked above to continue this discussion. We will be looking into it.

    This forum is for the free core plugin only.

    Thank you.

    erisal

    (@erisal)

    I did it yesterday and I just redo it right now. But when I validate the ticket, I am returned to the homepage and there is no trace indicating that the ticket has been sent.
    Anyway your answer should appear here because it also relates to the free plugin.

    • This reply was modified 1 year ago by  erisal.
    Plugin Author Mark Zahra

    (@markzahra)

    Can you please confirm which option you’re using in the contact form? You should always receive a confirmation on the website and via email. If not, something may be wrong and we’ll look into it.

    We will post the final findings here, but the wordpress.org forums are not to be used for issues related to premium add-ons. This issue appears to only present itself when using one of our add-ons. The core plugin doesn’t include any social media features whatsoever.

    erisal

    (@erisal)

    I selected the add-on that is concerned and I followed each step. I had no error message or confirmation. I have already spent a lot of time and you have all the elements. For the sake of clarity, I’m not asking for assistance with the use of the plugin or its add-ons, I just want to know why there are requests to Facebook?

    Plugin Author Mark Zahra

    (@markzahra)

    Yes, we are looking into it and will post an update on our findings here.

    Nevertheless, this is not the right channel since it’s not an issue related to the free core plugin found on WordPress.org. It’s WordPress.org’s requirement that these forums are only used for wp.org plugins, which is why we offer the premium support channel for add-on users 🙂

    Would you mind emailing us directly on support@wprssaggregator.com? If you can include a screencast of the steps taken in the form it would help us determine the possible cause for this as we cannot currently reproduce the problem (which is the message not being sent).

    erisal

    (@erisal)

    I managed to generate a ticket on your site and I received a confirmation email. The first times, I didn’t provide “error_log” and “wprss_system” files and as this does not generate an error (with Firefox), I thought everything had gone well.
    Of course, the issue appears when the add-on is activated, but as previously stated, disabling the “Enable excerpts” and “Enable thumbnails” options in the free WP RSS Aggregator settings doesn’t change anything.
    Your analysis will tell which part the issue is coming from, if an issue really exist.

    Plugin Author Mark Zahra

    (@markzahra)

    We’ll investigate why no error was thrown on Firefox, thank you for your feedback.

    You are correct, disabling those features doesn’t stop this from happening, but it is still only introduced in the first place by the add-on. The core plugin is not the responsible party in this case. If you deactivate the add-on completely, you’ll see that it should no longer present itself.

    We will get back to you soon on your premium support ticket.

    Thank you.

    erisal

    (@erisal)

    Hello,

    Already 15 days ago, I asked you why your plugin performs data exchange with the domain / subdomain of Facebook. To date I have had no answer. I understand very well that this site is reserved for the support of free plugins and does not concern paid add-ons. Nevertheless, when we decide to install a free plugin it is often with the intention to extend its functionality. So I find it relevant that users know that if they want to take advantage of your add-ons, they will be faced with this situation. I paid an add-on that I have to uninstall because I refuse that there are such exchanges with an external domain.

    Plugin Author Mark Zahra

    (@markzahra)

    We have just discussed and investigated this issue with our developers and can confirm the following:

    1. You most likely are using an out-dated version of Excerpts & Thumbnails as your premium license expired in October 2017. Since then, we have released an update with a fix to a related issue which most likely also fixed this one.

    2. Without a valid license, you won’t be able to obtain that latest version, so you will keep seeing Facebook mentioned in the network tab. We have provided the renewal link in our premium support email reply.

    3. Here is a screencast of a test run on the latest versions of WP RSS Aggregator core and Excerpts & Thumbnails, where you can see that the issue is not reproducible: http://recordit.co/Ck5kbn89YA

    For these reasons, the conclusion is that the issue has already been fixed, but you need to update to receive the latest version from a couple of months ago.

    For future reference, we recommend sticking to the premium support channel for questions related to the premium add-ons. Providing your license info, system info and reproduction steps are vital for us to speed up the debugging process in such situations.

    erisal

    (@erisal)

    1) It took you 2 weeks to reach this conclusion! I have version 1.10.1 and the version 1.10.2 fixes the bug. As you aren’t transparent about the versions of your add-ons, impossible for a customer to know which version he will buy and when was the last update.

    2) I am not interested in your offer, it’s no longer necessary to pay to display a thumbnail

    3) Congratulations for correcting your bug

    4) Please, don’t pretend that you didn’t have these elements at the begining and as if it was me who was responsible for this situation. You had my personal details but you preferred to use this space. For my part, I didn’t ask for assistance, I just raised a issue. And I’ll tell you: I can’t believe it took you so long to come to such a trivial conclusion. I wonder if, after more than 1 year without any update, this version that succeeds mine hasn’t just been published! You should add a “Changelog” link to your site so that people can see the history of your versions, for more transparency.

Viewing 15 replies - 1 through 15 (of 20 total)
  • The topic ‘Virus ? Why “Data transfered from staticxx.facebook.com”’ is closed to new replies.