Oscommerce spam accounts problem

[cretbogdan]

Few days ago somebody started to creat a lot of accounts on my online shop .

All are spamming viagra , and other such as products .

Is he looking for something ?

Does he try to hack my store ?

Why is he making a lot of accounts ?

 

Anyone does know how to stop him ?

[tonylee5566]

Add a Verification code ?

[cretbogdan]

I would not add a verification code , I want the registration to be as simple as possible for my customers .

I hope that this will stop .

No spam account created in the last 14 hours ...

[Guest]

@@cretbogdan

 

Turn off the 'Tell a Friend' module.

 

 

 

Chris

[cretbogdan]

I don't have on the store tell a friend feature .

It was installed , I removed it , but nothing changed .

 

I have blocked an ip address through htaccess .

If nothing change I will block all China's ip addresses because their are not good at anything . They are just spamming me and make me angry .

[Guest]

@@cretbogdan

 

The tell a friend module is the ONLY way someone could use your sites Sendmail to spam.

 

 

Chris

[Jack_mcs]

@@cretbogdan As Tonylee mentioned, adding verification code is the correct way to handle this. If you don't want to do that, then you can block China and it may help for now but this is a common technique used by spammers world-wide and will eventually happen again.

 

@@DunWeb They can use any form that sends email, like create account and contact us. Since the op's site doesn't have tell-a-friend enabled, that is probably why they are creating accounts. The usual preference is the tell-a-friend page.

[Guest]

@@Jack_mcs

 

Jack, doesn't the aforementioned forms all use the admin entered email address ? How could 'someone' spam other email addresses using create account or contact us? Or did I misunderstand the OP's issue ?

 

 

 

Chris

[Jack_mcs]

Yes, all the forms use the same address. I don't know how they do it but whatever script they use is somehow able to inject different addresses. Maybe it just cycles using the form somehow. I know that we kept getting swamped with thousands of emails being sent from the accounts of various hosting members and for each one, once recaptcha was installed, it stopped.

[Guest]

@@Jack_mcs

 

Ok thanks for the info, more than likely a recaptcha is the best way to deal with it.

 

 

 

Chris