X-Cart forums

[tqualizerman]

Hi,

I've just noticed that we're getting a tonne of bot signups on our tqualizer.com site. I've got no idea where they're signing up, and am hoping someone can help.

I had thought it was through the register.php page. So we added the autocomplete=off tag to the <form> and I think that slowed them down a bit. Even so, there's still approximately 5~10 per hour registering through our site.

Does anyone know how we might also effectively cut them down further? I know that captcha and similar methods aren't as effective as they used to be.

[anandat]

I had faced the same problem with version 4.1.x. Even after enable the captcha I was getting the bots signup. I guess spammers successfully generated the some kind of script so that they can easily signup.
When I upgraded my store to 4.5.4 I never received any junk customer registration. I highly recommend to upgrade your store to latest version.
If you can't upgrade your store then use http://www.google.com/recaptcha on signup page instaed of x-cart's default captcha system. This will improve the situation.

[while.e.kyote]

Also, if you can't upgrade, running it behind a anti-bot or protection service / CDN like Cloudflare (and others) can mitigate a lot of this as they tie into several of the honey-pot systems and challenge IP addresses from known spam origins.