Results 1 to 2 of 2
  1. #1
    Join Date
    Oct 2007
    Posts
    43
    Plugin Contributions
    0

    Default Change URL of Customer Login page (main page=login)

    Hi,

    Running 1.5.5.e, using ZC since 2007.

    Having an issue, searched and can't find this question. I'd like to change my customer login page URL.

    From the normal "main page=login" to something similar, like login_new, cust_login, etc.

    Why?

    I'm repeatedly getting hit with DDOS attacks, going to the login page and trying to log in from 100s of different URLs (I am guessing, to access a Premium area trying with random username/PW?).

    I have hundreds/thousands of attempted accesses like this:



    00:15:12 0 ¥Guest 192.111.129.150 16:57:18 16:57:31
    Time Since Clicked:
    00:14:59 ago Session ID: fqvdb27cv4ej1jagm7ii5hq3q3
    Host: 192.111.129.150
    User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36
    /catalog/index.php?main_page=login&action=process


    There's no damage being done to the site, other than wasted unneeded bandwith, and I'd really like to get rid of these electronic cockroaches.

    Yes, I can block each of the 100s of individual IPs, have done that before, very time consuming.

    Thinking if I just change the code so main catalog page points to a different URL when you hit login. And then I can change it from time to time, to foil these idiots.

    Can anyone help and point me to where the name of the login page is defined, and how I may successfully change it without messing anything esle up?

    Thanks!!

  2. #2
    Join Date
    Jul 2012
    Posts
    16,177
    Plugin Contributions
    17

    Default Re: Change URL of Customer Login page (main page=login)

    What about links that customers save to go to the login page? If constantly change this, won't they be disrupted? And yes, I'm thinking of the "301" type redirect as well, because if a 301 redirect is used to then keep things "straight" the initial "problem" doesn't get addressed because even those DDOS will just get directed to the place where they weren't desired to go...

    I don't see a ZC version described, is it possible that these "visitors" aren't being recognized as spiders and that is how/why they keep being provided enough information to keep trying?
    ZC Installation/Maintenance Support <- Site
    Contribution for contributions welcome...

 

 

Similar Threads

  1. Replies: 2
    Last Post: 3 May 2013, 02:49 AM
  2. v150 Subdomain login reverting to parent domain url login page?
    By ckelley in forum General Questions
    Replies: 16
    Last Post: 21 Nov 2012, 08:54 PM
  3. Customer Login On Main Page
    By denks in forum Templates, Stylesheets, Page Layout
    Replies: 1
    Last Post: 31 Aug 2007, 07:06 AM
  4. Customer Login On Main Page Missing
    By denks in forum Templates, Stylesheets, Page Layout
    Replies: 1
    Last Post: 31 Aug 2007, 07:05 AM
  5. After customer LogIn goes back to main page
    By christayah in forum General Questions
    Replies: 18
    Last Post: 23 Sep 2006, 08:12 PM

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
disjunctive-egg
Zen-Cart, Internet Selling Services, Klamath Falls, OR