Banner Logo

Be a part of the family: Connect, Receive Support,
Contribute, and Reap Abundant Rewards

DANGEROUS BUG AND URGENT PROBLEM with import module

MultivendorX

Resolved
Viewing 34 reply threads
  • Author
    Posts
    • #180183
      a.dalcamo
      Participant

      URGENT VERIFICATION REQUEST
      The problem I encountered concerns the import of products. The starting situation is that in shop A I have uploaded a product with some variants with a SKU (I put the EAN of the product itself).
      Now I wanted to import the same product with a different price into shop B so that different suppliers could be displayed on the product page.
      With the same import file used previously and only changing the price, I tried to import into shop B without setting the update flag. The lines have been skipped because the COD already exists.
      This thing already seemed strange to me because the comparison of the COD should do it with the products present in shop B. I therefore tried the import by setting the product update flag. The import went ok and the product has been updated. However, I don’t have the new product in my products table, while in shop A I go to check that the price of that product has been updated.
      So in practice I from shop B can, knowing the product code, update anything in the catalog of another shop that has that same product.
      It is an inadmissible thing and I request that it be fixed immediately because in this way the import module is unusable. If there isn’t a short time to resolve the problem, I will certainly have to switch to another plugin and ask for the payment to be reversed

    • #180209

      We are working on the fixes .Please give us some time. We will release a fix by next week for sure .

    • #180221
      a.dalcamo
      Participant
      This reply has been marked as private.
    • #180222

      Hello @a-dalcamo.Our team will check,Please give them some time .Our replies might get delayed as this is weekend.

    • #180243
      a.dalcamo
      Participant
      This reply has been marked as private.
    • #180245
      This reply has been marked as private.
    • #180276
      a.dalcamo
      Participant
      This reply has been marked as private.
    • #180304

      Our team is working on the issue .Once it get fixed we will inform you.

    • #180358

      @a.dalcamo, actually it was not an issue.

      I presume you are exporting a CSV from a vendor, then uploading that exact CSV right?
      Can you please confirm the flow?

    • #180366
      a.dalcamo
      Participant
      This reply has been marked as private.
    • #180370

      @a.dalcamo, Thanks for the confirmation.
      Each product has its own unique id, so you need to change the product id in that csv.

      As you are using the same product id for the other vendor too, hence it is updating the other vendor product, which has this id when you are clicking on Update the existing product.

    • #180417
      a.dalcamo
      Participant

      Sorry, there was a translation error in the previous email. At the beginning of this post I have attached the csv file that I uploaded in shop 1. I don’t use the ID field but I use the COD field where I enter the EAN of the product. And so far so good.
      I want to insert the same file for shop 2 by changing the price of the product, so that I take advantage of the SPMV module, therefore the same products with two different suppliers.
      I repeat that I do not use the ID field. Loading as a new product fails because it tells me that another product with that CODE exists (and God forbid), while if while loading the file I flag “Update existing products”, then it goes to update the price of the product in shop 1 (which that shouldn’t happen). In any case, I cannot enter the product in shop 2.
      Instead of uploading via csv, I tried to insert the product manually in shop 2 with “Add product”. I entered the COD in the search and the corresponding product ticks, I click on the “sell yours” button and I have the product sheet where I can change the price, description and more. I note that as SKU (the COD to be clear) it is marked as “COD-1”. Everything is saved and the product is added to the catalog of shop 2.
      I go to the frontend of the shop on the product page and I have what I wanted: a product sold by two different suppliers as it should be.
      So it’s the import process that’s not working.
      As further proof, I changed the COD in the csv file to “COD-1” to see if that associated it. I upload it to shop 2 as a new product and it gets added to the catalog, but in the frontend I have two distinct product pages and they are not associated.

      I hope I was clear

    • #180418
      a.dalcamo
      Participant

      In any case, in answer to yours, above, in practice, even having or going to guess the id of a product, I shouldn’t have the permissions to modify the products of other suppliers.
      Imagine this scenario: an attacker registers as a shop and starts uploading a file containing the product ID and modifying the text with malicious code or incorrect information, or in any case anything else that can cause damage.
      With this system it is possible to do it, and in my view it is a big security hole.
      Tell me if something like this is feasible

    • #180499

      Hello, a.dalcamo . Practically it is not possible for vendor1 to know the access of vendor2 which is needed to export vendor2’s product unless he is a hacker. And also the import module works according to the default flow of WooCommerce.

    • #180519
      a.dalcamo
      Participant

      Forgive me but you didn’t read well what I wrote to you. I didn’t mention having access to the other shop, it’s not necessary, and it’s not even necessary to be a hacker. I told you that just a CSV is enough.
      How do I know the product ID? Look at the screenshot that I have attached where I can recover the ID. I assure you that you don’t need a hacker.
      Before writing this email I did the test again. I uploaded a csv to another store other than this one, where I put that id in its own column and filled all other fields with things other than that product. Answer: “You have successfully updated 1 product”, the product is now in the new store and has disappeared from the original store.
      The same thing happens if instead of the ID I put the COD. You do the tests and you notice this error.
      In general what has to happen is that I can’t modify an ID that doesn’t belong to my shop and, in the case of the COD, this only has to be added to my catalog associated with the original one and in the displayed frontend which is sold by different vendors.

    • #180611

      @a.dalcamo, I would love to help you out here, but can you please explain by COD what are you referring to here, we don’t have this field on our end.

    • #180618
      a.dalcamo
      Participant

      in the csv is the column with SKU

      Thanks

    • #180620

      Hi, please assist me a bit more. By default, WooCommerce supports these CSV fields: https://woocommerce.com/document/product-csv-import-suite-column-header-reference

      So what this COD field is actually?

    • #180711
      a.dalcamo
      Participant

      Hello, I have use as schema the link in your tutorial about import

      https://github.com/woocommerce/woocommerce/wiki/Product-CSV-Import-Schema#csv-columns-and-formatting

      and the column is SKU (in the italian version is COD).
      Via your schema linked is post_id, I think

      Thanks

    • #180725

      @a.dalcamo, Thanks for the update.

      Like Product ID, SKU is also unique per product, so when the vendor is using an SKU of an already existing product, it is also updating the same product.

      We will see whether we can add such checking, whether same SKU, ID of a vendor can’t be updated by other vendor.

    • #180740
      a.dalcamo
      Participant

      That’s exactly the point. From another store, I don’t have permission to edit or delete products from another store.

      My need is to take advantage of the advantages that your SPMV (Single Product Multiple Vendor) module gives me. I repeat that this module works if I manually and individually enter each product, but I can’t do it if I import them from csv. So how to do with csv?

    • #180774

      Hi @a.dalcamom, I am afraid SPMV flow can only be achieved using our method : https://www.youtube.com/watch?v=EvGUzQAp_Zw

      SPMV flow can’t be achieved using csv import.

    • #180903
      a.dalcamo
      Participant

      Ok, so if I have a thousand products to be included in my new shop (which are already present in the WooCommerce products catalog), or insert them one by one, or delete your plugin and I am looking for another.
      Because if I decided to import it with the CSV gate the catalog of another seller who inserted them in the catalog to put them in mine.

      In this case the SPMV module is totally useless. In total I have a plugin that, with only these two problems (and one in my opinion quite big) cancels all my intentions to continue using it.

      Do you have any solution in this regard?

    • #181076
      a.dalcamo
      Participant

      today we should have released the project to the customer and I never imagined that a paid plugin would have such a sensational bug. I await your final reply

    • #181120

      As you know multivendorx is an extension of WooCommerce, hence we are fully dependent on their flow.

      Now in order to create an spmv flow, it requires a specific flow, where we need to create a copied product and then map them together in another database.

      That’s the reason spmv flow can’t be achieved via CSV, as there is flexibility from WooCommerce that will only map some specific products. If you want to use csv for spmv, then all the products added via csv will be considered as spmv if the names are the same. But this is not a desired flow by most of the site.

      You may check other multivendor solutions, but I am 100% sure, spmv can’t be achieved via csv.

    • #181150
      a.dalcamo
      Participant
      This reply has been marked as private.
    • #181212

      Hi, our replies are inline :

      -the vendor inserts order change but in the admin it is no longer stored

      >> The vendor can only chnage the sub order status. However main order will be changed by admin only.
      For further help, please check : https://prnt.sc/O9iDHT8VUvFT

      – customer and seller invoices have the same amount
      >> Can you please explain the query a bit more, so we can assist you accordingly.

      – the vendor registration section https://ofla.it/vendor-registration/ is no longer displayed
      >> As you are using membership module, hence you need to add a plan. As you didn’t have a plan, hence this error ” The admin needs to add a plan for the vendor to register on the site”

      I have added a plan, as you can see this is working fine: https://ofla.it/vendor-registration/

      – slides or video URLs cannot be inserted in the banner section of the shop profile

      >> This is an issue on our end, we will fix this in our next update.
      For now, you can track the progress of this issue from here: https://github.com/multivendorx/MultiVendorX/issues/325

      -policies section are no longer stored in the seller’s file
      Could you check all this? Everything worked perfectly except bug import csv that we are solving, the access data are:

      >> Can you please explain by what are you referring to by seller’s file.

    • #184545
      a.dalcamo
      Participant
      This reply has been marked as private.
    • #184549
      a.dalcamo
      Participant

      other problem i not have access to seller page https://ofla.it/wp-admin/admin.php?page=vendors&ID=19&name=vendor-personal why?

    • #184550

      We tried to recreate your issue related to policy in our end but we have not faced any issue https://prnt.sc/FXNBEIYdkEGz
      Kindly make sure you set the policies following these steps – Vendor Dashboard >>Policies>>Set the policies accordingly and click save options.
      If you still face any issue please let us know.

    • #187373
      a.dalcamo
      Participant

      In response to:
      “As you know multivendorx is an extension of WooCommerce, hence we are fully dependent on their flow
      Now in order to create an spmv flow, it requires a specific flow, where we need to create a copied product and then map them together in another database.
      That’s the reason spmv flow can’t be achieved via CSV, as there is flexibility from WooCommerce that will only map some specific products. If you want to use csv for spmv, then all the products added via csv will be considered as spmv if the names are the same. But this is not a desired flow by most of the site.
      You may check other multivendor solutions, but I am 100% sure, spmv can’t be achieved via csv.”

      I want implement my script for this, so I need the flow of spmv. In particular I need the relevant tables to be able to associate the products.
      On the other hand, regarding the problem of updating products via id or sku that could modify other products from other vendors, I saw the possibility, via woocommerce hook, of being able to insert a script that checks me if the product to be updated is part of its catalog or less. I believe this is “woocommerce_product_import_pre_insert_product_object”. Is such a thing plausible?

    • #180692
      a.dalcamo
      Participant

      Hello, in you tutorial for import product you refer at this CSV field in github:

      https://github.com/woocommerce/woocommerce/wiki/Product-CSV-Import-Schema#csv-columns-and-formatting

      and the field is SKU. In the CSV in “https://woocommerce.com/document/product-csv-import-suite-column-header-reference” I presume is post_id

      Thanks

    • #184553
      a.dalcamo
      Participant
      This reply has been marked as private.
    • #187397

      I resolve any question, thanks but for policy of seller please see this page https://ofla.it/vendor/trendystore/policies/ i insert plicy but not see at seller url!
      >> There is an issue and we will fix it in our next update. You can track the progress from here https://github.com/multivendorx/MultiVendorX/issues/328

      I want implement my script for this, so I need the flow of spmv. In particular I need the relevant tables to be able to associate the products.
      On the other hand, regarding the problem of updating products via id or sku that could modify other products from other vendors, I saw the possibility, via woocommerce hook, of being able to insert a script that checks me if the product to be updated is part of its catalog or less. I believe this is “woocommerce_product_import_pre_insert_product_object”. Is such a thing plausible?

      >>Can you please elaborate this a little more.

    • #192239

      It’s been a while and we have not heard back from you . We presume that your query is solved now . So we are closing this thread . If you face any issue in future please open a new thread .

Viewing 34 reply threads

The topic ‘DANGEROUS BUG AND URGENT PROBLEM with import module’ is closed to new replies.