Registration Spamming

6 years ago
Hi,

I have a site Version 2.4, which is receiving a small (10-20) false registrations per day (I know they are false because of the similarity in the content of each, an complaints). I have enabled reCaptcha on the form, but its still happening.

Does anyone have any ideas
1) Could it be automatic registrations, or is it likely to be human
2) If automatic, how it could be happening
(Apparently there are logs available for failed attempts, but haven't got access to those as yet).
and 3) how can I try to stop it happening.


Thanks for any advice.

PK
6 years ago
There are several topics in the forum commenting this. If you cant find them do a focused Google search within this site
6 years ago
eadameg wrote:
There are several topics in the forum commenting this. If you cant find them do a focused Google search within this site

Eduardo,

How do you do a focused Google search within this site?

Thanks,
Tony
6 years ago
Carneno wrote:
How do you do a focused Google search within this site?


Like you would for any site - use the "site:" modifier   :)

site:nopcommerce.com your search stuff follows
6 years ago
New York wrote:

Like you would for any site - use the "site:" modifier   :)

site:nopcommerce.com your search stuff follows


OH.  OK.  I never knew that.

Thanks,
Tony
6 years ago
Thanks for the prompt @eadameg

After a few attempts think I have solved the issue, for now anyway.


For anyone else who might be interested.

I used these URL's for info.
https://www.nopcommerce.com/boards/t/20176/urgent-regarding-fake-customers-registration.aspx
https://www.nopcommerce.com/boards/t/20218/fake-customers-registering-to-the-website.aspx
http://www.sitepoint.com/easy-spam-prevention-using-hidden-form-fields/
http://www.kirsle.net/doc/submitter.html

For ideas and inspiration.

A summary of the solution I used.

Added a column to the registration model with a common name for a form. Tried fields like honeypot, spoofname etc, but these didn't seem to work
Added the column to the registration form, as a normal text box
Set the field not to use Autocomplete using Jquery Autocomplete="Off"
Created a CSS style to hide the text box.
Trapped the column in the controller to check it was empty!


While doing this also fixed issues with loads of guest accounts being created by ping services and also a service looking for autodiscover.xml
made a change to WebHelper.cs to stop these.
Thanks @New York  https://www.nopcommerce.com/boards/t/11434/sql-guest-users.aspx?p=2


Hope it helps, will now check how much of this is available out of the box in 3.1 as upgrading to that version.

PK
7 months ago
blacklab2 wrote:
Hi,

I have a site Version 3.90, which is receiving a small (20-30) registrations through temporary email addresses per day. I want my nopcommerce site to block all those temporary email addresses so that, users can only register through major email providers like yahoo, hotmail, gmail etc.

i want to know is there any nopcommerce feature to block all those temporary disposable email addresses.Kindly help me out to resolve this issue .Thanks


Thanks for any advice.

Shayan