Results 1 to 5 of 5
  1. #1
    Join Date
    Aug 2009
    Posts
    26
    Plugin Contributions
    0

    Default fake accounts regex for bots not working

    Version 1.5.4 I get about 5 to 10 fake accounts (which looks like bots) and noticed the postcode is always a string of letters instead of numbers.
    So I added a regex line pattern="^[0-9]{4}$" to the create_account.php file(s). I tested to create an account with a non matching postcode and it wouldn't let me The fake accounts still keep being created with a postcode that doesn't match the regex.
    How can that be? Are bots using another means but the create account form to create fake accounts?


  2. #2
    Join Date
    Feb 2006
    Location
    Tampa Bay, Florida
    Posts
    9,625
    Plugin Contributions
    123

    Default Re: fake accounts regex for bots not working

    I'd say consider upgrading. There are anti-spam measures in the newer versions.
    That Software Guy. My Store: Zen Cart Modifications
    Available for hire - See my ad in Services
    Plugin Moderator, Documentation Curator, Chief Cook and Bottle-Washer.
    Do you benefit from Zen Cart? Then please support the project.

  3. #3
    Join Date
    Jan 2004
    Posts
    66,364
    Blog Entries
    7
    Plugin Contributions
    274

    Default Re: fake accounts regex for bots not working

    Quote Originally Posted by edvon View Post
    Are bots using another means but the create account form to create fake accounts?
    Yes. Newer versions have made some changes to mitigate against that.
    .

    Zen Cart - putting the dream of business ownership within reach of anyone!
    Donate to: DrByte directly or to the Zen Cart team as a whole

    Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
    Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

  4. #4
    Join Date
    Aug 2009
    Posts
    26
    Plugin Contributions
    0

    Default Re: fake accounts regex for bots not working

    Thanks, I guess upgrading will be the best/only option to keep these bots out.

  5. #5
    Join Date
    Oct 2008
    Location
    Croatia
    Posts
    1,541
    Plugin Contributions
    19

    Default Re: fake accounts regex for bots not working

    Upgrading is definitely the way to go because you're using a very old version of Zen Cart on a very old php version, but you might also consider my AntiSpam plugin in the meantime. It should work with 1.5.4, you'll just need to insert the new line to your create_account.php manually. But consider this just a temporary patch until you upgrade.

 

 

Similar Threads

  1. v154 Russian fake accounts, but using old customer number
    By mcpisik in forum General Questions
    Replies: 4
    Last Post: 8 May 2019, 06:01 PM
  2. AutomaticLogin for New Customer Accounts not working
    By PastelBlack in forum All Other Contributions/Addons
    Replies: 0
    Last Post: 20 Jan 2008, 05:26 AM

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
disjunctive-egg
Zen-Cart, Internet Selling Services, Klamath Falls, OR