We are under attack. We had over 6K "public user" shopping carts in an hour. Some bot is attaching the site. Any ideas how to stop them, set a script for to many requests per minute? We need something as this is filling our shipping department with tons of junk orders and using up resource. It's almost a brute force attack.
*Using Odoo SH and Odoo 12
use cloudflare...
I've had this happen twice now. Odoo12 CE.
You can see from the access logs numerous lines like this (X's are my own):
45\.227\.254\.6\ \-\ \-\ \[27/Jan/2022:01:42:22\ \-0500\]\ "GET\ /shop/cart/update\?category=1459\&csrf_token=XXXXXXXXXXXXXXXXXXXe3d651o1638288418\&product_id=4XXX\&product_template_id=XXXX%27%29 UNION ALL SELECT NULL\-\- NFmu\ HTTP/1\.1"\ 405\ 178\ "\-"\ "Mozilla/5\.0\ \(Windows;\ U;\ Windows\ NT\ 5\.2;\ de\-DE\)\ AppleWebKit/532\.0\ \(KHTML,\ like\ Gecko\)\ Chrome/\ Safari/532\.0"4.0.202.2
Does anyone find solution for this issue?
Crea un account oggi per scoprire funzionalità esclusive ed entrare a far parte della nostra fantastica community!
Registrati| Post correlati | Risposte | Visualizzazioni | Attività | |
|---|---|---|---|---|
|
1
nov 25
|
1355 | ||
|
12
set 22
|
48158 | ||
|
0
set 22
|
5217 | ||
|
0
mar 15
|
6019 | ||
|
Portal User Spam
Risolto
|
|
6
mag 25
|
3934 |
1. Use the live chat to ask your questions.
2. The operator answers within a few minutes.
I am having the same issue both for my odoo12 and 13 store. It is a small store and I have no idea how it attracts attacks. All the spam orders are under public user for the same product. Anyone have an solution?