I was doing some research on the customer system today and I noticed that ever 4 minutes for the past 20+ hours a new customer was being added to the customer database. These customers have nulls for username and password and e-mail.
Is there any setting in nopCommerce that will prevent customers from setting up accounts with null userids and null e-mail accounts in on the customer login form?
I realize that I can turn on e-mail validation to try and guard against this but we wanted to make it as easy as possible for customers to register and were hoping to not need the e-mail validation feature.
Every time a visitor hits your home page, you get a guest registration. Don't worry about it. If you are concerned about using up ID numbers, run the maintence module (in admin) every day to delete the guest accounts. Be happy that you are getting hits!!
And requiring e-mail authorization won't eliminate this.
It's a good idea to use it -- it keeps the numbers of spammers and trolls to a minimum.
Even after I turned on the e-mail validation in the Customer settings, I am still seeing new records being added to the customer database every 4 minutes.
Can anyone explain this to me?
Does this mean that the App_Data/settings.txt file has been compromised?
Also, look at your logs in Admin. You will probably see a lot of:
"The controller for path '/{some file name}' was not found or does not implement IController."
Click on 'View' and look at the detail on the error. It will show if it is created by a spider crawling through your site looking for missing or updated files, or is from an external search engine link, or by a bookmarked user looking for a web page.
I'm getting on the average of about 150-200 of these per day (I've got a heavily bookmarked and search engine linked site), and it's going to take time to settle out and get relinked. I do keep an eye on it though, and one thing I did do was to modify the "file not found" error page to indicate that the website has changed and a link to the new entry point. This helps to capture your customers who have bookmarked an old page that is no longer available on your new site.
I am seeing log entries that match what Mike outlined.
Also, when I view the Guest customer details for a lot of the entries I see a entry for the last URL visited and by looking at several Guest records it appears that this is just a search engine crawling throug the site. I feel better now that I understand that Guest records are created every time the site is hit and I will monitor this for a few days to see if the crawling eventually ends...at least for a while.
Thanks again everyone, Gary
This topic was automatically closed 365 days after the last reply. New replies are no longer allowed.