Fake Client Registrations

Posted: April 05, 2019 at 7:30 AM Quote #227073
Hi,

Since I launched the Web site with nopCommerce, I have been very impressed with the speed and efficiency of the app.  You guys have done such a tremendous job with this and you deserve a great THANK YOU!  Wordpress was a nightmare to manage and maintain.  There was always a threat of attack and every other day, there was a new update to install.  It was a full-time job to keep up with Wordpress.  nopCommerce is a time saver!

Nevertheless, the scammers are still out there and I have noticed four client registrations that are not valid.  I checked the IP address and they are from Ukraine and Russia.  I deleted them and reported the IP.  

Although I have reCapcha and a policy verification checkbox on the Registration page, I am still getting these fake users.  Is it possible for them to register with a link that bypasses the web page scam checks?  Is there a way to prevent this from happening?
This post/answer is useful
0
This post/answer is not useful

Please login or register
to vote for this post.

(click on this box to dismiss)
Posted: April 05, 2019 at 10:46 AM Quote #227083
Activate "honeypot"
This post/answer is useful
2
This post/answer is not useful

Please login or register
to vote for this post.

(click on this box to dismiss)
https://www.tonerkauf24.de
Posted: April 05, 2019 at 6:14 PM Quote #227094
ksprovis.net wrote:
Activate "honeypot"

I enabled HoneyPot and still got a fake registration.  What else can I do to keep from getting those?
This post/answer is useful
0
This post/answer is not useful

Please login or register
to vote for this post.

(click on this box to dismiss)
Posted: April 07, 2019 at 8:33 AM Quote #227148
ksprovis.net wrote:
Activate "honeypot"

Hey @New York,

The HoneyPot seems to be working.  I have not had any other fake registrations since I initiated honeypot.  :)
This post/answer is useful
1
This post/answer is not useful

Please login or register
to vote for this post.

(click on this box to dismiss)
Posted: April 08, 2019 at 7:27 AM Quote #227190
ksprovis.net wrote:
Activate "honeypot"

Hey New York,

Honeypot may be leaking because I received three fake registrations today from different IP addresses:
46.118.154.233
91.144.179.155
37.115.184.102

Is it possible for me to change my Registration page  "/register" link to a new link, such as "/ulsregistration"?

I do not know how they are managing to get through.  I have recapcha, honeypot, and a checkbox to agree with policy settings.  They are all required and yet, I am still getting fake registrations.
This post/answer is useful
0
This post/answer is not useful

Please login or register
to vote for this post.

(click on this box to dismiss)
Posted: April 09, 2019 at 12:20 AM Quote #227219
Hi,

Yes you can, just change the register route inside the "RouteProvider.cs" file. Also, you need to change any reference to "Register" to be "your new link"
This post/answer is useful
0
This post/answer is not useful

Please login or register
to vote for this post.

(click on this box to dismiss)
www.thenopplugins.com
Premium support services
  • Dedicated premium support services provided by core developers are intended for persons who run mission critical websites, work on projects with tight deadlines, or want to get dedicated support.
Professional services
  • Want to open a new store? Want to take your store to the next level? Need a custom extension? We can customize nopCommerce to fit your store perfectly. Request a quote to get started.