charmarsh 
Ecommerce Template Expert 
 
USA 
959 Posts Pre-sales questions only (More Details...)
  | 
 Posted - 02/13/2021 :  17:12:54
   
 
I'm getting hit with hundreds of unauthorized orders right now. How to stop this? 
 | 
dbdave 
ECT Moderator 
 
USA 
10577 Posts  | 
 Posted - 02/13/2021 :  17:30:12
   
 
 Have you tried blocking the IP address in your admin?
  If it's coming from different IP addresses, then you might want to enable/setup captcha on checkout, at least until it's gone - https://www.ecommercetemplates.com/help/admin-main.asp#recaptcha
  David 
 Edited by - dbdave on 02/13/2021  17:32:02
 | 
Marshall 
Ecommerce Template Guru 
 
USA 
1953 Posts  | 
 Posted - 02/13/2021 :  20:48:22
   
 
 You can also set up a block through the vsadmin/includes.php file
  To limit the number of transactions in a 24 hour period per IP set:
  $blockmultipurchase=10;
  ...where 10 here is the maximum number of purchases by that particular IP address in 24 hours.
  Marshall CENLYT Productions - ms designs Affordable Web Design Custom Ecommerce Designs Responsive Websites Cenlyt.com 
 | 
charmarsh 
Ecommerce Template Expert 
 
USA 
959 Posts Pre-sales questions only (More Details...)
  | 
 Posted - 02/14/2021 :  23:12:58
   
 
Every one has a different IP address!!!
  
 | 
charmarsh 
Ecommerce Template Expert 
 
USA 
959 Posts Pre-sales questions only (More Details...)
  | 
 Posted - 02/14/2021 :  23:14:18
   
 
recaptcha does not seem to work!
  I dont see any boxes for "checkout", the only boxes to check are: Card Entry, Admin Login, Ask a Question, Post Review, New Affiliate, Gift Certificate, New Account, Email Orders. 
  I tried checking the Card Entry box but I did not see any recaptcha question appear when I tested it. 
 Edited by - charmarsh on 02/14/2021  23:21:50
 | 
charmarsh 
Ecommerce Template Expert 
 
USA 
959 Posts Pre-sales questions only (More Details...)
  | 
 Posted - 02/14/2021 :  23:48:50
   
 
Is there a way to block IP address by country? 
 | 
charmarsh 
Ecommerce Template Expert 
 
USA 
959 Posts Pre-sales questions only (More Details...)
  | 
 Posted - 02/14/2021 :  23:53:24
   
 
The only way to hold them off is to check the vacation box and close the store! As soon as I open the store again the bots start streaming in again! 
 | 
Marshall 
Ecommerce Template Guru 
 
USA 
1953 Posts  | 
 Posted - 02/15/2021 :  04:51:55
   
 
 Do they by chance all use the same email address or phone number?
  Marshall CENLYT Productions - ms designs Affordable Web Design Custom Ecommerce Designs Responsive Websites Cenlyt.com 
 Edited by - Marshall on 02/15/2021  06:14:12
 | 
dbdave 
ECT Moderator 
 
USA 
10577 Posts  | 
 Posted - 02/15/2021 :  06:27:56
   
 
 I recommend that you setup captcha on the store until they are gone. Did you get access keys from google? Here is the setup help -  https://www.ecommercetemplates.com/help/admin-main.asp#recaptchaPlease post back what version of the store you are on too, as there have been some improvements in the handling of these in recent versions of the cart. David  
 | 
charmarsh 
Ecommerce Template Expert 
 
USA 
959 Posts Pre-sales questions only (More Details...)
  | 
 Posted - 02/15/2021 :  09:23:26
   
 
Random emails and phone numbers.
  I had google recaptcha codes already in there with no boxes checked. I checked the "card entry" box on the store and tested and saw nothing, so I went back to google and created new codes, entered and stlll see no recaptcha question box anywhere. I am using v. 7.2.5
 
  
 | 
dbdave 
ECT Moderator 
 
USA 
10577 Posts  | 
 Posted - 02/15/2021 :  10:14:44
   
 
 What checkout payment providers are you using? Can you enable one of the others and see if the captcha shows there...?
  David 
 | 
charmarsh 
Ecommerce Template Expert 
 
USA 
959 Posts Pre-sales questions only (More Details...)
  | 
 Posted - 02/15/2021 :  10:32:39
   
 
Good suggestion... I checked the "review" box and it does show up on the review page.
  But I need it to stop bots from placing orders.
  I am using Braintree. 
 | 
Vince 
Administrator 
 
43151 Posts  | 
 Posted - 02/15/2021 :  12:13:43
   
 
 | 
Phil 
ECT Moderator 
 
United Kingdom 
7786 Posts  | 
 Posted - 02/15/2021 :  12:21:32
   
 
 | 
charmarsh 
Ecommerce Template Expert 
 
USA 
959 Posts Pre-sales questions only (More Details...)
  | 
 Posted - 02/16/2021 :  09:09:58
   
 
I am still waiting for tech support from BrainTree, in the meantime, can I add a honeypot to the form field? Or something similar to keep the unauthorized orders from going through? 
 Edited by - charmarsh on 02/16/2021  09:15:14
 | 
charmarsh 
Ecommerce Template Expert 
 
USA 
959 Posts Pre-sales questions only (More Details...)
  | 
 Posted - 02/16/2021 :  16:27:35
   
 
I was able to block all non- USA ip addresses. Now I am getting spammed from New York!
  These last ones all order 1 of the same product. This product is the first one in my inventory alphabetically, it begins with "A" except for those that start with a number in their name. Is this why it is chosen, Any clues? 
 | 
dbdave 
ECT Moderator 
 
USA 
10577 Posts  | 
 Posted - 02/16/2021 :  18:14:59
   
 
 Have you looked at the server logs? I'm curious if there is anything in common there. Do you have your orders set to display the user agent? I've seen user agents that are bots, have the name of the bot there. If this is the case, you can redirect them and send them on their way with a script.
  David 
 Edited by - dbdave on 02/16/2021  18:15:20
 | 
charmarsh 
Ecommerce Template Expert 
 
USA 
959 Posts Pre-sales questions only (More Details...)
  | 
 Posted - 02/16/2021 :  22:20:50
   
 
David this is a little over my pay grade. Is this something I can ask my server to help with? 
 | 
Vince 
Administrator 
 
43151 Posts  | 
 Posted - 02/17/2021 :  02:25:03
   
 
 | 
charmarsh 
Ecommerce Template Expert 
 
USA 
959 Posts Pre-sales questions only (More Details...)
  | 
 Posted - 02/17/2021 :  09:34:18
   
 
Will do, thank you in advance! 
 | 
charmarsh 
Ecommerce Template Expert 
 
USA 
959 Posts Pre-sales questions only (More Details...)
  | 
 Posted - 02/17/2021 :  10:36:47
   
 
Also, isnt there a way to add a recaptcha to the order page form where they fill out the billing details, before they input their credit card info? 
 | 
|   |