We are under attack. We had over 6K "public user" shopping carts in an hour. Some bot is attaching the site. Any ideas how to stop them, set a script for to many requests per minute? We need something as this is filling our shipping department with tons of junk orders and using up resource. It's almost a brute force attack.
*Using Odoo SH and Odoo 12
use cloudflare...
I've had this happen twice now. Odoo12 CE.
You can see from the access logs numerous lines like this (X's are my own):
45\.227\.254\.6\ \-\ \-\ \[27/Jan/2022:01:42:22\ \-0500\]\ "GET\ /shop/cart/update\?category=1459\&csrf_token=XXXXXXXXXXXXXXXXXXXe3d651o1638288418\&product_id=4XXX\&product_template_id=XXXX%27%29 UNION ALL SELECT NULL\-\- NFmu\ HTTP/1\.1"\ 405\ 178\ "\-"\ "Mozilla/5\.0\ \(Windows;\ U;\ Windows\ NT\ 5\.2;\ de\-DE\)\ AppleWebKit/532\.0\ \(KHTML,\ like\ Gecko\)\ Chrome/\ Safari/532\.0"4.0.202.2
Does anyone find solution for this issue?
Créez un compte dès aujourd'hui pour profiter de fonctionnalités exclusives et échanger avec notre formidable communauté !
S'inscrire| Publications associées | Réponses | Vues | Activité | |
|---|---|---|---|---|
|
1
nov. 25
|
1355 | ||
|
12
sept. 22
|
48158 | ||
|
0
sept. 22
|
5217 | ||
|
0
mars 15
|
6019 | ||
|
Portal User Spam
Résolu
|
|
6
mai 25
|
3933 |
1. Use the live chat to ask your questions.
2. The operator answers within a few minutes.
I am having the same issue both for my odoo12 and 13 store. It is a small store and I have no idea how it attracts attacks. All the spam orders are under public user for the same product. Anyone have an solution?