security problem : automatic filling cart everyday

[newhere]

Hello,

 

Everyday our prestashop has about 8 filled shopping carts by a guest within between 0 and 60 secs. Under the menu customers/shopping carts. For example 4 carts in one second.

 

It looks like an automated filling with always same qty and same amounts over 8 carts We tried to stop it by only allow cart by registered customers. Also geolocation but didn't help.

 

now our provider says that we need provide the ip so they can block the ip address.

 

how can we log the ip address and how can we improve the security of our webshop ?

[benjamin utterback]

Hello newhere, they are coming by registered customers? or only one customer?

[Dh42]

Compare the time that the cart was filled against your server logs. Check to see if googlebot is doing it. More than likely it is google bot or that chinese search engine who's name I cannot remember at the moment.

 

Edit: To clarify, to get the ip you need to compare times between the server log and the cart. Remember there should be an offset, like if your server is set to GMT and your PrestShop is set to PT.

[newhere]

@benjamin : it is somebody or something (by guest) who just filling the cart.

 

@fanatic : how can log or find the ip in prestashop?

[Dh42]

YOu have to look in your server logs. Most cpanel servers only save the logs until awStats or Webalizer process them. More than likely it is google bot or yandex, what they are doing is following the add to cart links.