Any idea on how to control or stop SPamming from Tell a Friend? ANyone know HOW the email address in Tell a Friend get's pulled for spamming?
Any idea on how to control or stop SPamming from Tell a Friend? ANyone know HOW the email address in Tell a Friend get's pulled for spamming?
1. Turn off "Allow Guest To Tell A Friend": Admin->Configuration->Email Options
2. Use a spam detection resource: http://www.zen-cart.com/index.php?ma...d=27#formarmor
.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole
Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.
so what's the vulnerability? I have one customer who's just gotten hit by this. I'm supposed to tell him that he has to pay out more money because the form is vulnerablel?
Vulnerability? Who said there's any vulnerability?
.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole
Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.
If the form can be used to send out massive amounts of spam, that's a vulnerability to me. I've just never had this happen to any of my carts before.
You either make them register before they can send it or turn it off.
Please do not PM for support issues: a private solution doesn't benefit the community.
Be careful with unsolicited advice via email or PM - Make sure the person you are talking to is a reliable source.
I turned it off the second I realized it was a problem. My client didn't care thank heavens. But then the next morning I had a new set of spam released but it stopped after I went in and deleted the tell a friend template.
The new version (1.39a) does put the throttle on tell a friend.
If you delete or rename the /includes/modules/pages/tell_a_friend/ folder then anyone attempting to visit that page will be met with your Page Not Found response.
.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole
Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.