ZX AntiSpam [Support Thread]

[balihr]

This plugin (pending approval) will attempt to capture spam account registration based on a set of rules. If it detects a possible spam account, it will create a temporary account for that customer and will send out an email with a unique token for the customer to confirm their account. If they confirm the account, a real account is created for them and they can continue shopping. If they don't confirm it (which is usually the case with spam accounts because they use fake email addresses), their temporary account will be deleted - you can control how long to keep the confirmation active.

At the moment, the only rules available are to detect the number of capital letters in first and last name, street address and city. These were the only common factors I've noticed so far. New rules can be added - just submit your ideas.

You can set the plugin's Mode to "always" so ALL accounts require email confirmation before they can access your store. Keep in mind this is an unwelcome feature in ecommerce and you might lose sales because of it, but it's up to you to decide if you really need/want it.

You can also manually approve a customer from the admin->Customers->Customers Spam, as well as edit any details or delete the request.

Once approved, it can be downloaded at:
ZX AntiSpam and Email Verification Required 1.0

[thegoodlifestore]

I would suggest a rule that flags account sign-ups that have "google" as the company name. That seems to be the major constant on all the spam accounts that we have signing up.

[balihr]

That's a simple rule to add, but do you think this will help in the long run? They'll change it to bing and then what? In your case, how often do people actually use the company field? Would it be more productive if all entries with anything in the company name was flagged?

[thegoodlifestore]

In our case, it does seem like "google" is used all the time in the company field. We do have good customers that use the company field, so flagging it in general wouldn't be great for us.

[lankeeyankee]

Mine are always Bing, Apple, AT&T fwiw.

[balihr]

I've just submitted an update which includes company and country verification (both optional). It allows you to enter a list of "spam" company names, as well as a list of "allowed" countries. If you're based in the US and someone is creating an account with "Algeria" as their country, chances are it's a fake account - you can now define a list of allowed countries (usually just a few), and all other countries will need to verify their email before being able to register.

Until approved, the plugin can be downloaded from my website.

[balihr]

New update just submitted - added option to check the user's IP address and match country, state and city based on IP address. It also allows to check if user is behind a proxy, and if the IP is listed as a threat. The service requires an API key, but it's free for up to 10.000 lookups per month. Since the lookup is initiated only during the account creation process, this should be more than enough - it's highly unlikely that you'll have more than 10k signup attempts per month. And, if you actually do, this would mean you run a super-busy store and will easily be able to afford the paid plans...

[zamzom]

[ZC 1.5.8][PHP 8.0][MySQL 10.3]

May 'customers_referral' default be set to NULL

--> PHP Fatal error: 1364:Field 'customers_referral' doesn't have a default value :: INSERT INTO bd_customers_spam (customers_firstname, customers_lastname, customers_email_address, customers_nick, customers_telephone, customers_fax, customers_newsletter, customers_email_format, customers_default_address_id, customers_password, customers_authorization, customers_gender, entry_gender, customers_dob, entry_street_address, entry_postcode, entry_city, entry_country_id, entry_company, entry_suburb, entry_zone_id, entry_state, token, token_manual, reason) VALUES (...) ==> (as called by) /httpd.www/includes/classes/observers/auto.zx_antispam_observer.php on line 154 <== in /httpd.www/includes/classes/db/mysql/query_factory.php on line 667.

[swguy]

Users of this may also want to look at Delete Spam Customers.
https://www.zen-cart.com/downloads.php?do=file&id=2253

[zamzom]

There is also this kind of error in [ZC 1.5.8] (using Bootstrap template):

[13-Mar-2023 14:55:07 UTC] Request URI: /index.php?main_page=account_confirmation, IP address: 
--> PHP Fatal error: Uncaught Error: Call to a member function isMobile() on null in /httpd.www/includes/templates/template_default/templates/tpl_account_confirmation_default.php:16
Stack trace:
#0 /httpd.www/includes/templates/bootstrap/common/tpl_main_page.php(202): require()
#1 /httpd.www/index.php(94): require('/httpd.www/...')
#2 {main}
  thrown in /httpd.www/includes/templates/template_default/templates/tpl_account_confirmation_default.php on line 16.

Any ideas?

[ZC 1.5.8][PHP 8.0][MySQL 10.3]

May 'customers_referral' default be set to NULL