Registration Spamming

Posted: September 11, 2013 at 7:14 AM Quote #105154
Hi,

I have a site Version 2.4, which is receiving a small (10-20) false registrations per day (I know they are false because of the similarity in the content of each, an complaints). I have enabled reCaptcha on the form, but its still happening.

Does anyone have any ideas
1) Could it be automatic registrations, or is it likely to be human
2) If automatic, how it could be happening
(Apparently there are logs available for failed attempts, but haven't got access to those as yet).
and 3) how can I try to stop it happening.


Thanks for any advice.

PK
This post/answer is useful
0
This post/answer is not useful

Please login or register
to vote for this post.

(click on this box to dismiss)
PK
Posted: September 11, 2013 at 12:49 PM Quote #105195
There are several topics in the forum commenting this. If you cant find them do a focused Google search within this site
This post/answer is useful
1
This post/answer is not useful

Please login or register
to vote for this post.

(click on this box to dismiss)
Regards

Eduardo

www.tecnofin.com
nopCommerce Solution Partner
-----------------------------------------------------------
Developer of e-Commerce sites since 1996
Mexico - USA - Canada - Chile - Colombia - Costa Rica - Peru
Desarrollo de sitios de comercio electrónico
Posted: September 11, 2013 at 3:51 PM Quote #105211
eadameg wrote:
There are several topics in the forum commenting this. If you cant find them do a focused Google search within this site

Eduardo,

How do you do a focused Google search within this site?

Thanks,
Tony
This post/answer is useful
0
This post/answer is not useful

Please login or register
to vote for this post.

(click on this box to dismiss)
Posted: September 11, 2013 at 7:42 PM Quote #105220
Carneno wrote:
How do you do a focused Google search within this site?


Like you would for any site - use the "site:" modifier   :)

site:nopcommerce.com your search stuff follows
This post/answer is useful
2
This post/answer is not useful

Please login or register
to vote for this post.

(click on this box to dismiss)
www.noptools.com
Posted: September 11, 2013 at 9:18 PM Quote #105229
New York wrote:

Like you would for any site - use the "site:" modifier   :)

site:nopcommerce.com your search stuff follows


OH.  OK.  I never knew that.

Thanks,
Tony
This post/answer is useful
0
This post/answer is not useful

Please login or register
to vote for this post.

(click on this box to dismiss)
Posted: September 13, 2013 at 10:59 AM Quote #105351
Thanks for the prompt @eadameg

After a few attempts think I have solved the issue, for now anyway.


For anyone else who might be interested.

I used these URL's for info.
https://www.nopcommerce.com/boards/t/20176/urgent-regarding-fake-customers-registration.aspx
https://www.nopcommerce.com/boards/t/20218/fake-customers-registering-to-the-website.aspx
http://www.sitepoint.com/easy-spam-prevention-using-hidden-form-fields/
http://www.kirsle.net/doc/submitter.html

For ideas and inspiration.

A summary of the solution I used.

Added a column to the registration model with a common name for a form. Tried fields like honeypot, spoofname etc, but these didn't seem to work
Added the column to the registration form, as a normal text box
Set the field not to use Autocomplete using Jquery Autocomplete="Off"
Created a CSS style to hide the text box.
Trapped the column in the controller to check it was empty!


While doing this also fixed issues with loads of guest accounts being created by ping services and also a service looking for autodiscover.xml
made a change to WebHelper.cs to stop these.
Thanks @New York  https://www.nopcommerce.com/boards/t/11434/sql-guest-users.aspx?p=2


Hope it helps, will now check how much of this is available out of the box in 3.1 as upgrading to that version.

PK
This post/answer is useful
0
This post/answer is not useful

Please login or register
to vote for this post.

(click on this box to dismiss)
PK
Posted: June 21, 2019 at 1:32 AM Quote #238359
blacklab2 wrote:
Hi,

I have a site Version 3.90, which is receiving a small (20-30) registrations through temporary email addresses per day. I want my nopcommerce site to block all those temporary email addresses so that, users can only register through major email providers like yahoo, hotmail, gmail etc.

i want to know is there any nopcommerce feature to block all those temporary disposable email addresses.Kindly help me out to resolve this issue .Thanks


Thanks for any advice.

Shayan
This post/answer is useful
0
This post/answer is not useful

Please login or register
to vote for this post.

(click on this box to dismiss)
Premium support services
  • Dedicated premium support services provided by core developers are intended for persons who run mission critical websites, work on projects with tight deadlines, or want to get dedicated support.
Professional services
  • Want to open a new store? Want to take your store to the next level? Need a custom extension? We can customize nopCommerce to fit your store perfectly. Request a quote to get started.
eCommerce CONFERENCE 2019
Learn more