Printable View
I have noticed, in recent weeks, that when I check the Who's online, there are dozens of "customers" with a cart, and they all have different numbers of "Gift certificates" but they don't have names (just IP), and they never check out. Right now, I see 87 of them, and they all have the same IP (and there is nobody else in the store).
What is that? Can I get rid of them? If so, how?
Do you sell gift certificates?Quote:
Originally Posted by CaroleAs
What version of Zen Cart & PHP?
~Melanie
Yes I do (I probably should remove them as they are rarely purchased).Quote:
Originally Posted by mprough
Zencart 1.5.7c
PHP : in the backend of the store, it says PHP Version: 5.6.40 but on my host it is 8.0
By the way, today, there are "only" 57 in the store, and the IPs are no longer the same (although a whole bunch still share the same IP)
What would happen if I were to remove the gift certificate option? Would those bots disappear?
Your version of PHP is too low. While you should most certainly upgrade your Zen Cart, the version of PHP is too low as Zen Cart v1.5.7 is designed for PHP 5.6 through PHP 8.0 (with PHP 7.4 recommended). (https://docs.zen-cart.com/user/first..._requirements/)Quote:
Originally Posted by CaroleAs
I would watch for the number of gift certificates sent, or any other GV related strange activity because you may be vulnerable.
Do not post a link to your site in this thread for security.
I would proceed to update your PHP to 7.4 on your installation and make plans to begin upgrading to 1.5.8a ASAP.
~Melanie
I am so not that techy with ZC. Upgrading means outsourcing it since there is no one-click upgrade like Wordpress, right? I have done it myself once, and it took me 2 weeks (and a super long thread in the support forum, back then!) That is why I was keeping that version.Quote:
Originally Posted by mprough
How do I upgrade the PHP? As I said, on my host it is set to 8.0. How do I change that in ZC?
And please, give me very detailed steps as it is still a foreign language to me.
Your host most likely said they have PHP 8.0 available, however, your Zen Cart is using 5.6 so that is what is configured in your hosted account.Quote:
Originally Posted by CaroleAs
They should be able to help you with this =)
No one click upgrade, but software has to be kept up to date... it's too dangerous otherwise.
~Melanie
I have removed the Gift Certificate option from the store.
I have updated PHP which now shows PHP Version: 7.4.33
I tried 8.0 but I got a blank page so something must not agree with it (i will have to investigate).
Is there a way to "kick out" everyone in the store?
Configuration >> Website Maintenance
By putting it under maintenance? For how long?Quote:
Originally Posted by mprough
Until you turn it off =)Quote:
Originally Posted by CaroleAs
Are the bots supposed to disappear? They are still "in the store". And they have multiplied since I posted in the first place!Quote:
Originally Posted by mprough
They can't do anything. Contact your webhost and tell them you are experiencing a bot attack.Quote:
Originally Posted by CaroleAs
~Melanie
Yeah, they are still coming in!!!Quote:
Originally Posted by mprough
I am in touch with my host and here is what they say:
At this time, there are around 400 bots in the store, and it is under maintenance. Any other suggestion?Quote:
I added a directive to the .htaccess file to block certain types of bots, in fact, let me show you what that was
This is the code:
# Block Bots Zencart
RewriteEngine On
RewriteCond %{HTTP_USER_AGENT} (MJ12bot|AhrefsBot|SemrushBot|DotBot|BLEXBot) [NC]
RewriteRule .* - [F,L]
# End Block Bots Zencart
But there are so many types of bots these days, it can be difficult to block them all, but specific plugins for the CMS (Zencart) can be very helpful, that and Cloudflare
With the help of my host, we have been blocking some IPs that were in the store by the hundreds. Now, it is down to about a dozen, so it is manageable. However, is there anything else I should/could do (before upgrading to 1.5.8)?
I would keep an eye on it while you get your upgrade going for sure =)Quote:
Originally Posted by CaroleAs
~Melanie
I'm putting out a request for someone with Cloudflare knowledge to write an article for the help about setting this up. We just have a paragraph right now in the FAQ I mentioned.