Spamming by Tell a Friend

Any idea on how to control or stop SPamming from Tell a Friend? ANyone know HOW the email address in Tell a Friend get's pulled for spamming?

1. Turn off "Allow Guest To Tell A Friend": Admin->Configuration->Email Options
2. Use a spam detection resource: http://www.zen-cart.com/index.php?main_page=infopages&pages_id=27#formarmor

so what's the vulnerability? I have one customer who's just gotten hit by this. I'm supposed to tell him that he has to pay out more money because the form is vulnerablel?

Vulnerability? Who said there's any vulnerability?

If the form can be used to send out massive amounts of spam, that's a vulnerability to me. I've just never had this happen to any of my carts before.

You either make them register before they can send it or turn it off.

I turned it off the second I realized it was a problem. My client didn't care thank heavens. But then the next morning I had a new set of spam released but it stopped after I went in and deleted the tell a friend template.

The new version (1.39a) does put the throttle on tell a friend.

delia:

after I went in and deleted the tell a friend template.

Please tell me how you do that. i cant find a tell friend folder and the php in lang modules does not make a difference when removed.
thank you.

If you delete or rename the /includes/modules/pages/tell_a_friend/ folder then anyone attempting to visit that page will be met with your Page Not Found response.

Yes, Dr. Byte that's true. But if you turn off the link and delete the template it's not so likely or such a problem.

However, the last site I deleted the template on continued to have problems anyway (whether it was still the residual return emails or new, I don't know). That site I think was also using the tell-a-friend sidebox but I'm not sure.

I just upgraded that site to the newest version and I have had no complaints yet. I'll let you know if her problems stop completely.

Thanks for the info , all seems to be well now.

Hi, working on a friend's 1.3.9h version. I have removed all Tell A Friend templates (I think), the button, and turned off the option in Admin.

HOWEVER, a clickable link still appears in the product listings, and although it only leads to the Page Not Found, I would like to get rid of the link completely. Can someone please tell me what I'm missing :blink:

https://www.herbalmagickinc.com is the link.

Thanks :D

Happy Thanksgiving!!!

Peek in the Admin ... Catalog ... Product Type ... EDIT LAYOUT ...

Show Product Tell a Friend button
Display the Tell a Friend button on Product Info

Note: Turning this setting off does not affect the Tell a Friend box in the columns and turning off the Tell a Friend box does not affect the button
0= off 1= on

Thank you. I looked everywhere BUT there!!

:D