Post by fzebr » Thu Feb 08, 2018 8:30 pm

I understand this is my first post but, I'm hoping that you guys and girls can help with a situation which has been going on now since the start of the week...

A person (I think..?) is opening accounts on my website everyday with each account having a different IP address and a different email address. He's opening between 5 and 20 accounts a day. He's also doing the same with affiliates. The only things that are the same every time are - name, address and contact number.

Once the accounts are opened each account has multiple password resets.

Is there anyone that is able to help resolve this issue as it is being a nuisance and I'm waking up to best part of 100 emails everyday.

Newbie

Posts

Joined
Thu Feb 08, 2018 8:10 pm

Post by straightlight » Fri Feb 09, 2018 6:18 am

Enable the account approval from the admin customer groups. Accounts will only be created with your consent. An alternative solution would be to use the CSRF protection form to avoid POST flooding: https://www.opencart.com/index.php?rout ... on_id=4773

Dedication and passion goes to those who are able to push and merge a project.

Regards,
Straightlight
Programmer / Opencart Tester


Legendary Member

Posts

Joined
Mon Nov 14, 2011 11:38 pm
Location - Canada, ON

Post by Mealz » Mon Feb 12, 2018 6:09 pm

I am having exactly the same thing!! And it only started in the last week or so too.
Not a "James Kelvin" by any chance?
I'm deleting daily - both affiliate and customer accounts and hoping that one day they'll just give up.
What are they hoping to achieve anyway?

New member

Posts

Joined
Fri Jul 26, 2013 4:58 pm

Post by straightlight » Tue Feb 13, 2018 6:40 am

A solution has been posted above ... just try it.

Dedication and passion goes to those who are able to push and merge a project.

Regards,
Straightlight
Programmer / Opencart Tester


Legendary Member

Posts

Joined
Mon Nov 14, 2011 11:38 pm
Location - Canada, ON

Post by Mealz » Tue Feb 13, 2018 4:37 pm

straightlight wrote:
Tue Feb 13, 2018 6:40 am
A solution has been posted above ... just try it.
I don't understand what that extension does...

New member

Posts

Joined
Fri Jul 26, 2013 4:58 pm

Post by wektech » Wed Feb 14, 2018 3:24 am

I too have seen dozens of James and Jane Kelvin (as well as other names) accounts being created and multiple password resets. I am not sure as to the intent as there are no orders (fraudulent or otherwise) being generated by these accounts or using the affiliate codes. All these accounts are being created from proxy server addresses indicating fraudulent activity but I can not figure out what they are trying to accomplish.

Newbie

Posts

Joined
Thu Aug 27, 2015 1:01 am

Post by straightlight » Wed Feb 14, 2018 6:40 am

Mealz wrote:
Tue Feb 13, 2018 4:37 pm
straightlight wrote:
Tue Feb 13, 2018 6:40 am
A solution has been posted above ... just try it.
I don't understand what that extension does...
Simply read the description on the mentioned marketplace URL. If you have questions about it, post in the support forum link provided on that page.

Dedication and passion goes to those who are able to push and merge a project.

Regards,
Straightlight
Programmer / Opencart Tester


Legendary Member

Posts

Joined
Mon Nov 14, 2011 11:38 pm
Location - Canada, ON

Post by Mealz » Wed Feb 14, 2018 5:32 pm

wektech wrote:
Wed Feb 14, 2018 3:24 am
I too have seen dozens of James and Jane Kelvin (as well as other names) accounts being created and multiple password resets. I am not sure as to the intent as there are no orders (fraudulent or otherwise) being generated by these accounts or using the affiliate codes. All these accounts are being created from proxy server addresses indicating fraudulent activity but I can not figure out what they are trying to accomplish.
I don't know either!

New member

Posts

Joined
Fri Jul 26, 2013 4:58 pm
Who is online

Users browsing this forum: No registered users and 29 guests