gusman126 Posted November 6, 2019 Share Posted November 6, 2019 I have been notified by clients that they are adding SPAM clients again, but this time they do not use www or http in their names or surnames. Is someone else affecting you? Link to comment Share on other sites More sharing options...
matutino Posted November 8, 2019 Share Posted November 8, 2019 We've had the exact same issue, 22 new users registered from 3/11 to now with the same random characters name and surname. Looks like bots signing up new users. How can we protect our websites from this? Link to comment Share on other sites More sharing options...
gusman126 Posted November 8, 2019 Author Share Posted November 8, 2019 hace 40 minutos, ndiaga dijo: Hi, The best way to stop this is to let only customers send you messages not visitors. This is how I did it here : https://prestatuts.com/en/contact-us It is not contact, it is when users register 1 Link to comment Share on other sites More sharing options...
matutino Posted November 8, 2019 Share Posted November 8, 2019 (edited) That's it, it's a very different problem. I've found plenty of info about how to avoid SPAM on the contact-us form but I can't use it to solve my problem. A good option would be to add reCaptcha when new users register on the store , but I couldn't find a forum thread with precise info or a free module to achieve that. There's a free module that works on PS 1.6 but not on 1.7. It's this one, in case it's useful for somebody: https://prestapros.com/en/blog/free-module-recaptcha-for-prestashop-registration-form Edited November 8, 2019 by matutino (see edit history) Link to comment Share on other sites More sharing options...
gusman126 Posted November 8, 2019 Author Share Posted November 8, 2019 hace 16 minutos, matutino dijo: That's it, it's a very different problem. I've found plenty of info about how to avoid SPAM on the contact-us form but I can't use it to solve my problem. A good option would be to add reCaptcha when new users register on the store , but I couldn't find a forum thread with precise info or a free module to achieve that. There's a free module that works on PS 1.6 but not on 1.7. It's this one, in case it's useful for somebody: https://prestapros.com/en/blog/free-module-recaptcha-for-prestashop-registration-form A few months ago, the same problem occurred, but the last names were web links, there was a solution and a patch The captcha module did not solve anything Now using letters, it will be harder to find a solution Link to comment Share on other sites More sharing options...
matutino Posted November 9, 2019 Share Posted November 9, 2019 (edited) Thank you ndiaga and gusman126 for your answers. When activated the option of "guess customers" if they don't create an account can buy right away without verifying their email, so I find it a good option to use this verification process for new user registration. So, do you know what's the best way to use email validation? There's no option in the back office and it's ridiculous to pay 60€ incl. taxes for a module to do that. I've found some free module but, again, they don't work on PS 1.7. Thank you in advance! Edited November 9, 2019 by matutino (see edit history) Link to comment Share on other sites More sharing options...
delboy01 Posted November 11, 2019 Share Posted November 11, 2019 I to have this problem its very annoying. Anyone managed to fix this ? I have disabled new customers emails which while not ideal will stop the bots sending to the email address through my website. Link to comment Share on other sites More sharing options...
sampsonzak Posted November 11, 2019 Share Posted November 11, 2019 (edited) I am having this issue, but luckily for me they are not registering accounts. They are spamming my contact form instead. Why does PrestaShop have no protection against this? Edited November 11, 2019 by selectshop.at swearwords removed (see edit history) Link to comment Share on other sites More sharing options...
selectshop.at Posted November 11, 2019 Share Posted November 11, 2019 12 minutes ago, sampsonzak said: I am having this issue, but luckily for me they are not registering accounts. They are spamming my contact form instead. Why does PrestaShop have no protection against this? PS version ? Your PS version is up-to-date ? You implemented captcha ? Implemented the patches described here ? https://www.prestashop.com/forums/topic/985068-robot-creating-clients-automaticaly/ Link to comment Share on other sites More sharing options...
gusman126 Posted November 11, 2019 Author Share Posted November 11, 2019 9 minutes ago, selectshop.at said: PS version ? Your PS version is up-to-date ? You implemented captcha ? Implemented the patches described here ? https://www.prestashop.com/forums/topic/985068-robot-creating-clients-automaticaly/ Version 1.7.5.1 but notice, the last name has letters and in the name too. They don't use www or http like the other time, it's not the same bug, it's much more serious Link to comment Share on other sites More sharing options...
delboy01 Posted November 11, 2019 Share Posted November 11, 2019 53 minutes ago, selectshop.at said: PS version ? Your PS version is up-to-date ? You implemented captcha ? Implemented the patches described here ? https://www.prestashop.com/forums/topic/985068-robot-creating-clients-automaticaly/ P.s version is up-to-date 1.7.6.1 Captcha is on contact pages as i had problems with the spam contact. This is on the New customer sign up like the OP. Link to comment Share on other sites More sharing options...
selectshop.at Posted November 11, 2019 Share Posted November 11, 2019 1 hour ago, delboy01 said: P.s version is up-to-date 1.7.6.1 Captcha is on contact pages as i had problems with the spam contact. This is on the New customer sign up like the OP. Seems to be a new possibility of spam to me, so a bug. Did you already added this to the github as a possible issue ? Link to comment Share on other sites More sharing options...
delboy01 Posted November 11, 2019 Share Posted November 11, 2019 Just now, selectshop.at said: Seems to be a new possibility, so a bug. Did you already added this to the github as an possible issue ? Not a bug, A new spam bot thats spamming the new customer sign up. Like before where they were signing up with www or http in the sign up title that way patched. Im thinking a new bot thats got round the latest patch and not adding the www or http. Link to comment Share on other sites More sharing options...
sampsonzak Posted November 11, 2019 Share Posted November 11, 2019 (edited) How can I add captcha ? Do I have to pay for another module to do it? Or does PrestaShop give it to us for free?? I hope so... 1.7.2.4 , do not want to upgrade as it will cause problems with my plugins and themes. Last time I tried to upgrade, my whole website turned into a blank white screen. No way am I trusting PrestaShop's one-click-updater again. Edited November 11, 2019 by sampsonzak (see edit history) 1 Link to comment Share on other sites More sharing options...
selectshop.at Posted November 11, 2019 Share Posted November 11, 2019 @sampsonzak Here you will find some: free the post I named before: https://www.prestashop.com/forums/topic/985068-robot-creating-clients-automaticaly/ paid: https://addons.prestashop.com/en/search?search_query=captcha Link to comment Share on other sites More sharing options...
selectshop.at Posted November 11, 2019 Share Posted November 11, 2019 51 minutes ago, delboy01 said: Not a bug, A new spam bot thats spamming the new customer sign up. Like before where they were signing up with www or http in the sign up title that way patched. Im thinking a new bot thats got round the latest patch and not adding the www or http. If you are using latest PS version of the serie you are using (1.6x or 1.7.x) and a bot is trespassing the implemented security scripts, than of course it is a bug which should be fixed. 😉 1 Link to comment Share on other sites More sharing options...
matutino Posted November 11, 2019 Share Posted November 11, 2019 2 hours ago, selectshop.at said: PS version ? Your PS version is up-to-date ? You implemented captcha ? Implemented the patches described here ? https://www.prestashop.com/forums/topic/985068-robot-creating-clients-automaticaly/ Last version available, 1.7.6.1, so yep, it's up-to-date. 2 hours ago, sampsonzak said: I am having this issue, but luckily for me they are not registering accounts. They are spamming my contact form instead. Why does PrestaShop have no protection against this? This seems to be a different problem, there are many other threads about it in the forum. In this case the issue is bots creating new users 1 hour ago, selectshop.at said: Seems to be a new possibility of spam to me, so a bug. Did you already added this to the github as a possible issue ? I didn't add it to GitHub, but thank you for telling me, I'll do it right away EDIT: I've just reported the bug on GitHub Link to comment Share on other sites More sharing options...
matutino Posted November 28, 2019 Share Posted November 28, 2019 BTW, this is the GitHub thread about this topic: https://github.com/PrestaShop/PrestaShop/issues/16327 I solved it by installing this free reCATPCHA module and activating the option "Enable Captcha for account creation" in settings:https://github.com/nenes25/eicaptcha/releases/tag/2.0.4 Link to comment Share on other sites More sharing options...
delboy01 Posted December 2, 2019 Share Posted December 2, 2019 On 11/28/2019 at 1:52 PM, matutino said: BTW, this is the GitHub thread about this topic: https://github.com/PrestaShop/PrestaShop/issues/16327 I solved it by installing this free reCATPCHA module and activating the option "Enable Captcha for account creation" in settings:https://github.com/nenes25/eicaptcha/releases/tag/2.0.4 Thanks i installed this on the sign up form but it seems the bot is able to get through the google verification now Come on prestashop help us please Link to comment Share on other sites More sharing options...
MichaelEZ Posted December 2, 2019 Share Posted December 2, 2019 so try https://www.google.com/recaptcha/intro/v3.html#introducing-new-recaptcha Link to comment Share on other sites More sharing options...
delboy01 Posted December 2, 2019 Share Posted December 2, 2019 (edited) 25 minutes ago, MichaelEZ said: so try https://www.google.com/recaptcha/intro/v3.html#introducing-new-recaptcha And is there a module for the v3 ? thats free I tried putting the keys for v3 but it didnt work for the module posted above. Edited December 2, 2019 by delboy01 (see edit history) Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now