Wishlist remove action failes with a 403 forbidden

Hi,

after last update and latest patches, trying to remove items from the wishlist fails with a 403 error:

/wp-admin/admin-ajax.php?action=woodmart_remove_from_wishlist&product_id=43529&…
Status: 403 Forbidden
We cant remove from wishlist. Something wrong with AJAX response. Probably some PHP conflict.

—-

checked PHP error log and nothing, so no server-side issue

and it works perfectly for older versions of Woodmart with same WP install / plugins / setup

any hint?

TY

Hello,

Please disable any plugins that are not directly related to our website’s theme and provide us with your admin and FTP access details. We will log in to your account and investigate the issue. Please ensure that you only keep the following plugins that are necessary for our theme to work correctly:
– WoodMart core
– WooCommerce
– Elementor/WPBakery Page Builder

Thank you in advance.

Hi,

it has nothing to do with plugins and else (I know it is the default answer for everything, but it is getting really counter productive and quite frankly useless)

the real reason is that you guys append a lot of attributes to the ‘woodmart_remove_from_wishlist’ GET call, but now that list of attributes has grown to be soo long it breaks the GET param length HTTP spec of 2048, being a staggering 2237 characters long (!):

/wp-admin/admin-ajax.php?action=woodmart_remove_from_wishlist&product_id=27542&group_id=61&key=2c2e2a1c8d&atts[carousel_id]=5000&atts[speed]=5000&atts[slides_per_view]=3&atts[slides_per_view_tablet]=auto&atts[slides_per_view_mobile]=auto&atts[wrap]=&atts[loop]=false&atts[autoplay]=no&atts[autoheight]=no&atts[hide_pagination_control]=no&atts[hide_pagination_control_tablet]=yes&atts[hide_pagination_control_mobile]=yes&atts[dynamic_pagination_control]=&atts[hide_prev_next_buttons]=&atts[carousel_arrows_position]=&atts[hide_scrollbar]=yes&atts[hide_scrollbar_tablet]=yes&atts[hide_scrollbar_mobile]=yes&atts[scroll_per_page]=yes&atts[dragEndSpeed]=200&atts[center_mode]=no&atts[custom_sizes]=&atts[sliding_speed]=false&atts[animation]=false&atts[content_animation]=false&atts[post_type]=ids&atts[slider]=&atts[library]=&atts[css]=&atts[effect]=&atts[spacing]=&atts[spacing_tablet]=&atts[spacing_mobile]=&atts[carousel_sync]=&atts[sync_parent_id]=&atts[sync_child_id]=&atts[scroll_carousel_init]=&atts[disable_overflow_carousel]=&atts[element_title]=&atts[layout]=grid&atts[include]=27542&atts[custom_query]=&atts[taxonomies]=&atts[pagination]=links&atts[items_per_page]=-1&atts[product_hover]=inherit&atts[columns]=4&atts[columns_tablet]=auto&atts[columns_mobile]=auto&atts[sale_countdown]=0&atts[stretch_product_desktop]=0&atts[stretch_product_tablet]=0&atts[stretch_product_mobile]=0&atts[stock_progress_bar]=0&atts[highlighted_products]=0&atts[products_bordered_grid]=0&atts[products_bordered_grid_style]=inside&atts[products_with_background]=1&atts[products_shadow]=1&atts[products_color_scheme]=default&atts[product_quantity]=0&atts[grid_gallery]=&atts[grid_gallery_control]=&atts[grid_gallery_enable_arrows]=&atts[offset]=&atts[orderby]=&atts[query_type]=OR&atts[order]=&atts[meta_key]=&atts[exclude]=&atts[class]=&atts[ajax_page]=1&atts[img_size]=woocommerce_thumbnail&atts[force_not_ajax]=no&atts[products_masonry]=disable&atts[products_different_sizes]=disable&atts[lazy_loading]=no&atts[el_class]=&atts[shop_tools]=no&atts[query_post_type][]=product&atts[query_post_type][]=product_variation&atts[hide_out_of_stock]=no&atts[woodmart_css_id]=&atts[ajax_recently_viewed]=no&atts[pagination_arrows_position]=&atts[is_wishlist]=yes&atts[wrapper_classes]=

In previous version of Woodmart, it was much shorter, fitting within the 2048 threshold:

/wp-admin/admin-ajax.php?action=woodmart_remove_from_wishlist&product_id=89961&group_id=&key=437c48b97f&atts[element_title]=&atts[post_type]=ids&atts[layout]=grid&atts[include]=89961&atts[custom_query]=&atts[taxonomies]=&atts[pagination]=links&atts[items_per_page]=30&atts[product_hover]=inherit&atts[spacing]=10&atts[columns]=3&atts[columns_tablet]=auto&atts[columns_mobile]=auto&atts[sale_countdown]=0&atts[stretch_product_desktop]=0&atts[stretch_product_tablet]=0&atts[stretch_product_mobile]=0&atts[stock_progress_bar]=0&atts[highlighted_products]=0&atts[products_bordered_grid]=0&atts[products_bordered_grid_style]=inside&atts[products_with_background]=0&atts[products_shadow]=1&atts[products_color_scheme]=default&atts[product_quantity]=0&atts[grid_gallery]=&atts[grid_gallery_control]=&atts[grid_gallery_enable_arrows]=&atts[offset]=&atts[orderby]=&atts[query_type]=OR&atts[order]=&atts[meta_key]=&atts[exclude]=&atts[class]=&atts[ajax_page]=1&atts[speed]=5000&atts[slides_per_view]=4&atts[slides_per_view_tablet]=auto&atts[slides_per_view_mobile]=auto&atts[wrap]=&atts[autoplay]=no&atts[center_mode]=no&atts[hide_pagination_control]=&atts[hide_prev_next_buttons]=&atts[scroll_per_page]=yes&atts[img_size]=woocommerce_thumbnail&atts[force_not_ajax]=no&atts[products_masonry]=disable&atts[products_different_sizes]=disable&atts[lazy_loading]=no&atts[scroll_carousel_init]=no&atts[el_class]=&atts[shop_tools]=no&atts[query_post_type][]=product&atts[query_post_type][]=product_variation&atts[hide_out_of_stock]=no&atts[css]=&atts[woodmart_css_id]=&atts[ajax_recently_viewed]=no&atts[is_wishlist]=yes

And why are you doing this, when ONLY this request is enough:

/wp-admin/admin-ajax.php?action=woodmart_remove_from_wishlist&product_id=27542&group_id=61&key=2c2e2a1c8d

In fact you DO not add that params bloat for Compare: when I want to remove an item from compare list, only the ids and the key are passed.

please issue a patch ASAP

M

Hello,

You can fix it by applying patch # 555087. To do this, go to Dashboard -> WoodMart -> Patcher, find the corresponding patch and click on the “Apply” button. Let us know if it works for you.

Kind Regards

[Author]

Posts