• Resolved raha1988ab

    (@raha1988ab)


    Hi

    We run an online store built with WooCommerce using the latest version of the Woodmart theme. We’ve created several store manager accounts, using a custom role cloned from the default Shop Manager role via the User Role Editor Pro plugin.

    In this custom role, we have only restricted access to plugin/theme installation and removal via the admin menu — no capabilities have been removed. These users can still access those pages directly via URL if needed. However, we are experiencing strange and inconsistent behavior that is causing serious issues:

    When our users wich are administrator with restricted menu, update product prices or any content in products or pages or blog post and etc, sometimes the changes do not save or revert back to the previous value. or the page will clean and no content in it…

    Occasionally, when a product is set to out of stock, it automatically becomes available again after 24 hours, with the price displayed.

    In some cases, when our team updates the product description or content, the changes get wiped after saving the page.

    There are no scheduled actions, cron jobs, or cache purging rules that would explain this behavior, and it seems to happen at random.

    Our active plugins include:

    All-In-One Security (AIOS)

    Contact Form 7

    Elementor

    Instant Indexing

    Interlinks Manager

    LiteSpeed Cache (disabled means right now there is no cache in our site)

    Permalink Manager Pro

    Rank Math SEO + Rank Math SEO PRO

    User Role Editor Pro

    weLaunch Framework

    WooCommerce Group Attributes

    Woodmart Core

    WP Mail SMTP

    WooCommerce (latest version)

    Now I saw this in your plugin: Firewall -> PHP rules -> WP REST API , Now I disabled all checkd Items here,

    I want to know is that related somehow to your security plugin?

    Note: debug.log or error_log in cpanel dos not show anything related to this problem and I’m not sure is that related to you or not,

    PHP settings:

    PHP max input variables:10000
    PHP time limit:600
    PHP memory limit:2000M
    Max input time:1000
    Upload max filesize:80M
    PHP post max size:80M

    Cpanel + Litespeed webserver – now cache is disabeld

    nothing added to htaccess or wp-config.php file.

    theme is updated to latest version , wordpress too.

    Thanks

Viewing 7 replies - 1 through 7 (of 7 total)
  • Plugin Support hjogiupdraftplus

    (@hjogiupdraftplus)

    Hi @raha1988ab,

    If you have the WP REST API blocked for unauthorized access, it may create an issue, but for logged-in users, it should work.

    Here, you should deactivate the AIOS plugin and cross-check that the AIOS plugin itself is an issue or not.

    Regards

    Thread Starter raha1988ab

    (@raha1988ab)

    You mean right now I must disabel your plugin and see what is going on?

    Plugin Support hjogiupdraftplus

    (@hjogiupdraftplus)

    Hi @raha1988ab,

    Yes, you should disable the AIOS plugin and check if the issue is still there, “Prices Revert, Stock Auto-Restores,” etc.

    Thread Starter raha1988ab

    (@raha1988ab)

    @hjogiupdraftplus

    Hi , I disabled your plugin and now everything works well,

    What was the problem?

    now without your security plugin what should I do?

    How can we monitor that was your plugin and give you the details?

    Plugin Support hjogiupdraftplus

    (@hjogiupdraftplus)

    Hi @raha1988ab,

    Please disable the features below one by one and cross-check if it solves the issue. We need to identify which setting is causing the problem.

    1) WP Security > Firewall > PHP Rules – WP REST API Can you please cross-check the Disallow unauthorized REST requests:
    2) Deny bad query string – WP Security > Firewall > PHP rules tab. URL Security – Deny bad query strings: uncheck the checkbox and save
    3) Advanced char filter – WP Security > Firewall > PHP rules tab. – String filtering: Enable advanced character string filter: uncheck the checkbox and save
    4) 5g firewall rules – WP Security > Firewall > 6G Blacklist firewall rules tab. Enable legacy 5G firewall protection, uncheck the checkbox, and save
    5) 6g firewall rules – WP Security > Firewall > 6G Blacklist firewall rules tab. Enable 6G firewall rules – uncheck the checkbox and save.

    Let me know if still an issue.

    Regards

    Thread Starter raha1988ab

    (@raha1988ab)

    Hi

    It was not from your plugin, the main problem was the max_input_vars : 1000

    and I put this to 35000 and it fixed,

    thank you

    Plugin Support hjogiupdraftplus

    (@hjogiupdraftplus)

    Hi @raha1988ab,

    I’m glad to know the issue has been identified and resolved.

    Would you mind writing a quick five-star review on wordpress.org?

    https://wordpress.org/support/plugin/all-in-one-wp-security-and-firewall/reviews/#new-post

    Reviews also help others to make confident decisions about our plugin.

    Regards

Viewing 7 replies - 1 through 7 (of 7 total)

The topic ‘WooCommerce Mystery: Prices Revert, Stock Auto-Restores – Any Clues?’ is closed to new replies.