Access Blocker Support Thread

[haredo]

Zen Cart 2.1.0
Php Version: 8.3.20

@lat9 thanks for the quick debug fix which I applied.
I noticed last night in admin/ configuration/ access blocker setting that the sort order was different from my prior Version 1.5.2 so I looked into the data base to double check the sort_order the ScriptedInstaller.php loads. Every sort_order have this number: 2147483647 for the new 13 VALUES in the database.

[lat9]

Zen Cart 2.1.0
Php Version: 8.3.20

@lat9 thanks for the quick debug fix which I applied.
I noticed last night in admin/ configuration/ access blocker setting that the sort order was different from my prior Version 1.5.2 so I looked into the data base to double check the sort_order the ScriptedInstaller.php loads. Every sort_order have this number: 2147483647 for the new 13 VALUES in the database.

Sigh, did you ever have one of those days?

I'll get this captured on GitHub later, but you can change the version's /Installer/ScriptedInstaller.php, line 30, from

                (configuration_title, configuration_key, configuration_value, configuration_description, configuration_group_id, sort_order, date_added, use_function, set_function)

to

                (configuration_title, configuration_key, configuration_value, configuration_description, configuration_group_id, date_added, sort_order, use_function, set_function)

[haredo]

Sign,
YES, many: Welcome to my world ...
Work time for me at this gig, will make change when arrive home tonight after this musical festival here in Milwaukee, WI

[Bubbadood]

Thank you for all your work!

[Bubbadood]

I keep getting hammered on a daily basis.

"Next Illuminate\Database\QueryException: SQLSTATE[HY000] [1226] User 'o12804405' has exceeded the 'max_user_connections' resource (current value: 20) (SQL: select * from `zencrt_plugin_control` where (`status` = 1) order by `name` asc, `unique_key` asc) in /laravel/vendor/illuminate/database/Connection.php:760"

I'm still trying to figure out if all these are actually coming from people abusing the site or if I have an issue with my actual database. Full disclosure, this is on a beta site that I update with the latest changes on ZC GitHub. That aside, there is a tooltip that says adding an ip with just the first 2 subsets will block an entire range.

" If you enter only the upper segments of an IP address, e.g. 192.168.1., all matching IP addresses, e.g. 192.168.1.0-192.168.1.255 will be blocked."

I have tried this by just adding 34.174. but I continue to see a new address daily from that range that I then need to specifically block (34.174.234.230) am I doing something wrong? Do I need to add 3 sets 34.174.1. ?

Thank you in advance.

[lat9]

I keep getting hammered on a daily basis.

"Next Illuminate\Database\QueryException: SQLSTATE[HY000] [1226] User 'o12804405' has exceeded the 'max_user_connections' resource (current value: 20) (SQL: select * from `zencrt_plugin_control` where (`status` = 1) order by `name` asc, `unique_key` asc) in /laravel/vendor/illuminate/database/Connection.php:760"

I'm still trying to figure out if all these are actually coming from people abusing the site or if I have an issue with my actual database. Full disclosure, this is on a beta site that I update with the latest changes on ZC GitHub. That aside, there is a tooltip that says adding an ip with just the first 2 subsets will block an entire range.

" If you enter only the upper segments of an IP address, e.g. 192.168.1., all matching IP addresses, e.g. 192.168.1.0-192.168.1.255 will be blocked."

I have tried this by just adding 34.174. but I continue to see a new address daily from that range that I then need to specifically block (34.174.234.230) am I doing something wrong? Do I need to add 3 sets 34.174.1. ?

Thank you in advance.

Setting a to-be-blocked IP address of 34.174. should do the trick, preventing that address from creating accounts, sending contact-us email and the like.

What Access Blocker doesn't do is fully limit the selected IP addresses; that's what IP blocking in the site's .htaccess file is for.

[Bubbadood]

Thank you for the clarification.

[Jeff_Mash]

Hi Cindy - I am trying out version 1.5.2 (since I am still running zc1.5.8a). I notice that even though the plugin has been enabled for 30 minutes, I am seeing a spike in the ipdata dashboard. Would this be because we had the "Totally restrict access on threats?" set to true?

If so, that initial usage threshold of 1,500 is going to be used up within an hour! See image screenshot below.

[lat9]

Hi Cindy - I am trying out version 1.5.2 (since I am still running zc1.5.8a). I notice that even though the plugin has been enabled for 30 minutes, I am seeing a spike in the ipdata dashboard. Would this be because we had the "Totally restrict access on threats?" set to true?

If so, that initial usage threshold of 1,500 is going to be used up within an hour! See image screenshot below.

Yes, if "Totally restrict access" is enabled then every page access is checked and, if the access is associated with a threat, the session's closed so there's no record of it having been a threat if accessed again.

[Jeff_Mash]

Yes, if "Totally restrict access" is enabled then every page access is checked and, if the access is associated with a threat, the session's closed so there's no record of it having been a threat if accessed again.

Thanks! So I just turned off the "Totally restrict access." Am I correct in understanding that if I see any usage on the ipdata website, that represents actual form submissions that were blocked (on the ccontact_us, ask_a_question, create_account, guest checkout and login pages)? Or are those hits just ANY submission of those forms, and not necessarily a threat?

I ask because our site can get pretty busy (with spiders, bots, or just customers) and I see that ipdata steadily rising 1-2 points a minute. Trying to know if the data I'm seeing represents actual threats blocked or just lookups.