captcha in create account form

[Jhannys]

Hi everyone!
I need a captcha in my create account form, someone could help me or tell me what files should I modify? I'm using PS 1.7.5.1
Thank you.

[whaaaza]

me too ! help us 

[oswebtech]

 This will help you 

 

[JBW]

There are many modules that can do this. Here is mine:

https://addons.prestashop.com/en/website-security-access/44524-secure-captcha.html

Edited May 20, 2019 by JBW
English link added (see edit history)

[Knowband Plugins]

If you are looking for the paid solution then you should give a try to the reCaptcha module with invisible captcha which allows you to add Google reCaptcha protection on various pages including: 

• Customer Registration Page
• Customer Login Page
• Customer Contact Page
• Customer Forgotten Password Page

https://addons.prestashop.com/en/website-security-access/26035-google-recaptcha.html

[hobart]

I just wonder who is interested, and why, to create fake client accounts.

(please see attached an example)

I could not see any benefits, only wasting resources.

[Knowband Plugins]

Hi,

Fake accounts on your store could be created to exploit promotions, test vulnerabilities, or waste resources.

To prevent this, enable CAPTCHA on forms, enforce email verification for account activation, monitor logs for suspicious activity (e.g., multiple accounts from the same IP), and block repeat offenders.

Regards.

[hobart]

Hello

Who waste there own resources in order to waste my resources?

This is what I can not understand.

[Knowband Plugins]

That's a method to find the security loopholes in the website to hack the server. 

[Mediacom87]

Il y a 1 heure, hobart a dit :

Hello

Who waste there own resources in order to waste my resources?

This is what I can not understand.

These are all robots that automatically attack all PrestaShop installations to identify and use vulnerabilities, mainly in third-party modules, so it validates that you're using PrestaShop and then creates a list of affected sites to attack in a different way, using the resources to hack into other sites or to retrieve information about your site if it's of interest, such as e-mail addresses and the like.

Basically, your site is now identified and will be attacked differently the next time for other types of attacks, which is why you need to secure your site as much as possible from the outset.

[hobart]

21 minutes ago, Mediacom87 said:

These are all robots that automatically attack all PrestaShop installations to identify and use vulnerabilities, mainly in third-party modules, so it validates that you're using PrestaShop and then creates a list of affected sites to attack in a different way, using the resources to hack into other sites or to retrieve information about your site if it's of interest, such as e-mail addresses and the like.

Basically, your site is now identified and will be attacked differently the next time for other types of attacks, which is why you need to secure your site as much as possible from the outset.

Of course robots do this, but they waste resources.

I can not see any vulnerability in create a client accounts. So what? Which is the vulnerability?

What is the real reason to allocate resources to create accounts on other sites???