Magento Forum

   
Page 2 of 2
How secure is Magento? 
 
mikeonmage
Sr. Member
 
Total Posts:  101
Joined:  2011-02-03
 

@ JT

OK then how do you explain my issue?

i have Fontis reCAPTCHA installed and it has been double checked by another (reputable) developer to be working.

but i keep getting fake customer registrations - about 2 or 3 a day.

they are like this:

452 sesBesIdete sesBesIdeteVQ v.e.ronikalikes@gmail.com
451 Monicarj MonicazcGF Gutermuth@daolemi.com
450 Reennadix ReennadixZB aldenrivas24@yahoo.co.uk
449 Ommett24 Hmmett67OM Demoura@daolemi.com

the developer says it must be a security hole in an extension (he fixed one hole in one extension already). so how do we find out which extensions have the hole (other than turning them off and on) .

inst there some app or tool that can be run to find holes?

any way to stop this?

 
Magento Community Magento Community
Magento Community
Magento Community
 
kab8609
Enthusiast
 
Avatar
Total Posts:  813
Joined:  2009-04-07
Cleveland
 

Its a ever changing process. Something may work today, but hackers spend some time and find a new way to do it.

Why don’t you check their IP address. See if it is the same or very similar. You could block those IP addresses in your .htaccess file.

 
Magento Community Magento Community
Magento Community
Magento Community
Magento Community
Magento Community
    Back to top
Page 2 of 2