X-Cart forums

[cerberuscoins]

Hi


For the last 3 weeks I have had either a bot or person register up to 5 times per day a new user account. I have deleted each account but they keep registering. They use different email addresses each time.


I disabled my store for a week to stop this but within a few hours of reopening my store they had submitted 3 more user registrations and it will continue to happen



How can I stop this?

[Triple A Racing]

Originally Posted by cerberuscoins

....I disabled my store for a week to stop this but within a few hours of reopening my store they had submitted 3 more user registrations and it will continue to happen

If you've got full (root) access in your hosting package / setup, then do it outside of X-Cart at Server Level with blocks enabled via IP Tables and/or Apache and/or Nginx.
If you don't have full (root) access, then maybe easiest to do via your hosting company's help desk / support package.
All of the offending IPv4 and/or IPv6 addresses are recorded in your logs (Server and X-Cart)

[cerberuscoins]

Thank you. Ill try contacting Xcart support. They are also my webhost.

[pauldodman]

Have you got Recaptcha enabled?

[Triple A Racing]

Originally Posted by pauldodman

Have you got Recaptcha enabled?

A great double check check ^^
However if it's the V2 version that gets applied, it's not as effective as it used to be any more & it can be fooled.
Hence FWIW THIS thread about possibly using V3, which unsurprisingly... It then appears XC5 isn't quite ready for - yet

[cerberuscoins]

Xcart advised to purchase recaptcha @ $100


My issue with this is that Ive had to cancel the yearly subscription fees which went from $109 to $396 for a year. I wont be able to update it



its the covid "gift" I never wanted.


Now looking for a different 'store' after 15+ years

[Triple A Racing]

Originally Posted by cerberuscoins

Xcart advised to purchase recaptcha @ $100

That's just another example of bone idle, pathetic profiteering. It's all gone completely wrong for XC5, ever since 'sell us another dud 'n labs' took over sadly. They are totally clueless, 100% self-focused and only interested in self-aggrandising rubbish... You'll find that all the spineless CEO's / VP's are always uncontactable.

Originally Posted by cerberuscoins

My issue with this is that Ive had to cancel the yearly subscription fees which went from $109 to $396 for a year. I wont be able to update it

You won't be the only one: https://forum.x-cart.com/showpost.php?p=415503&postcount=34 Theoretically speaking, it's just shameful extortion, which cannot ever even be justified for a (currently) under-performing, badly managed, poorly organised product in the real world

Originally Posted by cerberuscoins

Now looking for a different 'store' after 15+ years

Many others users will be doing the exact same thing. Soon it will be rebranded into something more apt, like Tumbleweed-Cart or Killed-By-The-Lab-Boys or similar

[cerberuscoins]

Xcart have blocked the IP addresses of Tor system which was generating the sign ups.

[Triple A Racing]

Originally Posted by cerberuscoins

Xcart have blocked the IP addresses of Tor system which was generating the sign ups.

Good that you've solved your most immediate problem and ironic that it was achieved via blocking the offending IP addresses (as per our 1st post), albeit if they were TOR associated IP addresses, it's never really over... You did post earlier that X-Cart were your hosting company, which was / is a brave move (see other people's threads re: Overpriced & under specced hosting / The very recent catastrophic failure due to them allowing malware / ransomeware on to their own servers Then look what happened to you here... You were offered an up-selling, more profit option first, which you sensibly declined and then finally... they did what any competent proactively hosting company would have done ages ago. It's not been their finest hour...