Follow the discussion on this topic. This extension has nothing to do with the extensions list.
Dedication and passion goes to those who are able to push and merge a project.
Regards,
Straightlight
Programmer / Opencart Tester
Hi,
I have CSRF Protection Extension installed in version 3.0.2.0 and am still getting at least one fake account every few days. I have noticed that the account set up never has an address? how can this happen when any proper customer has to enter an address to set up an account?
Any ideas please?
I have CSRF Protection Extension installed in version 3.0.2.0 and am still getting at least one fake account every few days. I have noticed that the account set up never has an address? how can this happen when any proper customer has to enter an address to set up an account?
Any ideas please?
Always ask yourself WHY IS IT FREE???
As I said many times on the topic before, this extension does NOT prevent SPAM!arthena wrote: ↑Sun Aug 04, 2019 12:28 pmHi,
I have CSRF Protection Extension installed in version 3.0.2.0 and am still getting at least one fake account every few days. I have noticed that the account set up never has an address? how can this happen when any proper customer has to enter an address to set up an account?
Any ideas please?
It simply kicks out the CSRF bots sitting behind the HTML forms. Re-Captcha V3 is still needed to work with it so that Re-Captcha doesn't have to work with many sitting-by bots awaiting for a user.
Dedication and passion goes to those who are able to push and merge a project.
Regards,
Straightlight
Programmer / Opencart Tester
There are no promises with v1.5x releases with CSRF protection due to an older use of Encryption library from Opencart as compared to OC v3.x releases.
Dedication and passion goes to those who are able to push and merge a project.
Regards,
Straightlight
Programmer / Opencart Tester
Hi,
I get fake registrations every day. But CSRF Protection is bit complicated for newbie. Please help me if I am doing steps right.
I am using OC 3.0.3.2
I placed csrf.xml in /public_html/catalog/language/en-gb/extension/vqmod/xml and csrf_helper.php in /public_html/system/helper/ folder
Then I edited and put
in /public_html/catalog/view/theme/default/template/account/register.twig
But in which file should I put this?
I tried in /public_html/catalog/controller/account/register.php but it does not look the right one.
I get fake registrations every day. But CSRF Protection is bit complicated for newbie. Please help me if I am doing steps right.
I am using OC 3.0.3.2
I placed csrf.xml in /public_html/catalog/language/en-gb/extension/vqmod/xml and csrf_helper.php in /public_html/system/helper/ folder
Then I edited and put
Code: Select all
<form
{% if csrf_form_input %}
{{ csrf_form_input }}
{% endif %} action="{{ action }}" method="post" enctype="multipart/form-data" class="form-horizontal">
But in which file should I put this?
Code: Select all
$csrf = new Csrf();
$csrf->csrf_start($this->registry);
$data['csrf_form_input'] = $csrf->csrf_form_input();
Last edited by straightlight on Wed Apr 08, 2020 8:05 pm, edited 1 time in total.
For all of your Mobile phone needs.
https://mitrecyclers.com
Please use code tags!
You are referring to an older version of the extension. Please use the latest one.
You are referring to an older version of the extension. Please use the latest one.
Dedication and passion goes to those who are able to push and merge a project.
Regards,
Straightlight
Programmer / Opencart Tester
I downloaded extension yesterday. CRSF30.zip, updated on Mar, 29 2018. I guess it is latest version. Did I copied files to right place though?straightlight wrote: ↑Wed Apr 08, 2020 8:06 pmPlease use code tags!
You are referring to an older version of the extension. Please use the latest one.
For all of your Mobile phone needs.
https://mitrecyclers.com
The latest extension version only requires the use of VQMod.mitrecyclers wrote: ↑Thu Apr 09, 2020 12:40 amI downloaded extension yesterday. CRSF30.zip, updated on Mar, 29 2018. I guess it is latest version.straightlight wrote: ↑Wed Apr 08, 2020 8:06 pmPlease use code tags!
You are referring to an older version of the extension. Please use the latest one.
Dedication and passion goes to those who are able to push and merge a project.
Regards,
Straightlight
Programmer / Opencart Tester
I know I am asking very basic questions. but do you have any manual, or probably latest version have the manual inside. From where I can download latest version?
For all of your Mobile phone needs.
https://mitrecyclers.com
As said on my previous reply, this is the previous version.mitrecyclers wrote: ↑Thu Apr 09, 2020 1:13 amI know I am asking very basic questions. but do you have any manual, or probably latest version have the manual inside. From where I can download latest version?
Dedication and passion goes to those who are able to push and merge a project.
Regards,
Straightlight
Programmer / Opencart Tester
Yes I got that. My question is from where I can download the latest version? Can you please post link? I appreciate that.straightlight wrote: ↑Thu Apr 09, 2020 1:20 amAs said on my previous reply, this is the previous version.mitrecyclers wrote: ↑Thu Apr 09, 2020 1:13 amI know I am asking very basic questions. but do you have any manual, or probably latest version have the manual inside. From where I can download latest version?
For all of your Mobile phone needs.
https://mitrecyclers.com
It's already on the extension page.
Dedication and passion goes to those who are able to push and merge a project.
Regards,
Straightlight
Programmer / Opencart Tester
What is so difficult in posting a link for that extension page? I appreciate that. as I have downloaded many times from https://www.opencart.com/index.php?rout ... earch=CSRF and everytime it is older version.
For all of your Mobile phone needs.
https://mitrecyclers.com
It's on the first post of this topic already. If you're asking this remark / question, it means you haven't read the description of this extension either from the forum or on the Marketplace.mitrecyclers wrote: ↑Thu Apr 09, 2020 10:51 pmWhat is so difficult in posting a link for that extension page? I appreciate that. as I have downloaded many times from https://www.opencart.com/index.php?rout ... earch=CSRF and everytime it is older version.
[29-03-2018] - The CSRF helper has been improved with a more stronger algorithm form or string for better protection and also PHP 7+ compatibility.
[20-03-2018] - CSRF Support Forum topic updated by providing instructions for multiple social login free extensions.
[25-02-2018] - CSRF v3.2 for OC v2.x and v3.x releases
Thanks to the forum user: neelgajjar addressing that the latest CSRF release no longer creates flooded registration. All back to normal with v2.x releases, according to his feedback.
Dedication and passion goes to those who are able to push and merge a project.
Regards,
Straightlight
Programmer / Opencart Tester
I certainly have downloaded from same page. 100%. but you are saying it is not a latest version.straightlight wrote: ↑Thu Apr 09, 2020 11:07 pmIt's on the first post of this topic already. If you're asking this remark / question, it means you haven't read the description of this extension either from the forum or on the Marketplace.mitrecyclers wrote: ↑Thu Apr 09, 2020 10:51 pmWhat is so difficult in posting a link for that extension page? I appreciate that. as I have downloaded many times from https://www.opencart.com/index.php?rout ... earch=CSRF and everytime it is older version.
[29-03-2018] - The CSRF helper has been improved with a more stronger algorithm form or string for better protection and also PHP 7+ compatibility.
[20-03-2018] - CSRF Support Forum topic updated by providing instructions for multiple social login free extensions.
[25-02-2018] - CSRF v3.2 for OC v2.x and v3.x releases
Thanks to the forum user: neelgajjar addressing that the latest CSRF release no longer creates flooded registration. All back to normal with v2.x releases, according to his feedback.
Attachments
csrferror.jpg (180.61 KiB) Viewed 411448 times
For all of your Mobile phone needs.
https://mitrecyclers.com
There is nowhere to be said about not being the latest release. As per the updated date on the Marketplace, no updates have been made since last time since there is no need to. As per my above quote:mitrecyclers wrote: ↑Fri Apr 10, 2020 6:58 pmI certainly have downloaded from same page. 100%. but you are saying it is not a latest version.straightlight wrote: ↑Thu Apr 09, 2020 11:07 pmIt's on the first post of this topic already. If you're asking this remark / question, it means you haven't read the description of this extension either from the forum or on the Marketplace.mitrecyclers wrote: ↑Thu Apr 09, 2020 10:51 pm
What is so difficult in posting a link for that extension page? I appreciate that. as I have downloaded many times from https://www.opencart.com/index.php?rout ... earch=CSRF and everytime it is older version.
[29-03-2018] - The CSRF helper has been improved with a more stronger algorithm form or string for better protection and also PHP 7+ compatibility.
[20-03-2018] - CSRF Support Forum topic updated by providing instructions for multiple social login free extensions.
[25-02-2018] - CSRF v3.2 for OC v2.x and v3.x releases
Thanks to the forum user: neelgajjar addressing that the latest CSRF release no longer creates flooded registration. All back to normal with v2.x releases, according to his feedback.
It is already indicated that CSRF has been tested on both release series.[25-02-2018] - CSRF v3.2 for OC v2.x and v3.x releases
Dedication and passion goes to those who are able to push and merge a project.
Regards,
Straightlight
Programmer / Opencart Tester
Finally managed to get this sorted. Installed VQMOD Manager and Copied
csrf.xml in /public_html/vqmod/xml
csrf_helper.php in /public_html/system/helper
then edited csrf.xml and added below code
now I am able to see csrf value in my main page as
<form action="https://mitrecyclers.com/index.php?rout ... y/currency" method="post" enctype="multipart/form-data" id="form-currency"><input type="hidden" name="__csrf" value="XXXXXXRANDOMXXXXX">
Is that all? or do I have to do something further. Thanks.
csrf.xml in /public_html/vqmod/xml
csrf_helper.php in /public_html/system/helper
then edited csrf.xml and added below code
Code: Select all
<file name="catalog/controller/common/header.php" error="skip">
<operation error="skip">
<search position="before"><![CDATA[$data['scripts']]]></search>
<add><![CDATA[
$this->load->helper('csrf_helper');
csrf_start();
]]></add>
</operation>
</file><form action="https://mitrecyclers.com/index.php?rout ... y/currency" method="post" enctype="multipart/form-data" id="form-currency"><input type="hidden" name="__csrf" value="XXXXXXRANDOMXXXXX">
Is that all? or do I have to do something further. Thanks.
For all of your Mobile phone needs.
https://mitrecyclers.com
On a google search for 'opencart stop spam registrations' the very first result is viewtopic.php?t=200373 where you state...
...but then when you go to the support page (ie. this thread) for the extension you say...straightlight wrote: ↑Mon Dec 11, 2017 8:20 pmYou can be ensured this will definitely stop the spamming on your site.
So I'm a little confused. Will this extension stop spam registrations and enquiries? If not, can you recommend a solution that does? I'd rather not enable captcha for users but if I must I must.straightlight wrote: ↑Sun Aug 04, 2019 6:45 pmAs I said many times on the topic before, this extension does NOT prevent SPAM!
Who is online
Users browsing this forum: No registered users and 10 guests
