Hi all,
for some weeks, my database is being misused by someone that creates new portal users on a daily basis. So far, more than 1000 accounts have been created. Their names are always bogus but the email addresses sometimes seem real, sometimes not.
Do you have any idea how to stop this? / Block the Attacker? Its probably harmless, as these users are followers nowhere but its annoying to the whole company as they keep popping up in many2one fields.
Hi everyone,
having the same problem as well and it seems like the community is working on it. Here's the discussion : https://github.com/odoo/odoo/pull/190196
its about implementing Google Recaptcha and potentially Cloudflare Turnstile (definitely on signup and login views)
When is this fix going live? In Odoo 18.1? Or later?
Hi Friedrich
Such jobs are done by requests or api, one good solution is to activate the reCAPTCHA if did not yet so you can block robots from do it it
you can also integrate clodflare captcha or a honeypot strategy
If this persists, you still have the possibility to force email confirmation when sign/up or SMS confirmation or force 2FA for your account
In this case, an account will be active only when it's legit
Advanced option: Block IP's where accounts are created within x minute
block geolocation of IP where you do not run your business
hope this helps
I have a solution that seems to be working for my instance (Odoo 16). I posted it in the Odoo App store as "Website Signup Protection" module. It added some validation and verification to the signup process and I haven't gotten any fake accounts since I installed it.
I get the same thing and also looking for a solution. These spam signups eat more than half my daily limit of emails on Odoo Online (200 emails per day). Following.
| 相关帖文 | 回复 | 查看 | 活动 | |
|---|---|---|---|---|
|
0
3月 15
|
5084 | ||
|
0
3月 15
|
6342 | ||
|
2
9月 25
|
1849 | ||
|
0
11月 25
|
5849 | ||
|
2
1月 26
|
2482 |
1. Use the live chat to ask your questions.
2. The operator answers within a few minutes.
