Posting in the Magento forums has been disabled pending the implementation of a new and improved forum solution which should better serve the community.

For new questions please post at magento.stackexchange.com, the community-run support site for the Magento community. We will be providing updates on the new forum solution soon. For questions or concerns please email community@magento.com.

Magento Forum

Page 2 of 2
How secure is Magento? 
 
mikeonmage
Sr. Member
 
Total Posts:  101
Joined:  2011-02-03
 

@ JT

OK then how do you explain my issue?

i have Fontis reCAPTCHA installed and it has been double checked by another (reputable) developer to be working.

but i keep getting fake customer registrations - about 2 or 3 a day.

they are like this:

452 sesBesIdete sesBesIdeteVQ v.e.ronikalikes@gmail.com
451 Monicarj MonicazcGF Gutermuth@daolemi.com
450 Reennadix ReennadixZB aldenrivas24@yahoo.co.uk
449 Ommett24 Hmmett67OM Demoura@daolemi.com

the developer says it must be a security hole in an extension (he fixed one hole in one extension already). so how do we find out which extensions have the hole (other than turning them off and on) .

inst there some app or tool that can be run to find holes?

any way to stop this?

 
Magento Community Magento Community
Magento Community
Magento Community
 
kab8609
Enthusiast
 
Avatar
Total Posts:  821
Joined:  2009-04-07
Cleveland
 

Its a ever changing process. Something may work today, but hackers spend some time and find a new way to do it.

Why don’t you check their IP address. See if it is the same or very similar. You could block those IP addresses in your .htaccess file.

 
Magento Community Magento Community
Magento Community
Magento Community
Magento Community
Magento Community
Back to top
Page 2 of 2