Ir al contenido
Menú
Se marcó esta pregunta
6 Respuestas
1818 Vistas

Hi all, 


for some weeks, my database is being misused by someone that creates new portal users on a daily basis. So far, more than 1000 accounts have been created. Their names are always bogus but the email addresses sometimes seem real, sometimes not.


Do you have any idea how to stop this? / Block the Attacker? Its probably harmless, as these users are followers nowhere but its annoying to the whole company as they keep popping up in many2one fields.


Avatar
Descartar
Mejor respuesta

Hi everyone,

having the same problem as well and it seems like the community is working on it. Here's the discussion : https://github.com/odoo/odoo/pull/190196

its about implementing Google Recaptcha and potentially Cloudflare Turnstile (definitely on signup and login views)

Avatar
Descartar

When is this fix going live? In Odoo 18.1? Or later?

Mejor respuesta

Hi,
Have a look at this thread:  https://github.com/odoo/odoo/pull/185648
Thanks

Avatar
Descartar
Mejor respuesta

Hi Friedrich

Such jobs are done by requests or api, one good solution is to activate the reCAPTCHA if did not yet so you can block robots from do it it

you can also integrate clodflare captcha or a honeypot strategy


If this persists, you still have the possibility to force email confirmation when sign/up or SMS confirmation or force 2FA for your account

In this case, an account will be active only when it's legit


Advanced option: Block IP's where accounts are created within x minute

block geolocation of IP where you do not run your business


hope this helps

Avatar
Descartar
Mejor respuesta

I have a solution that seems to be working for my instance (Odoo 16). I posted it in the Odoo App store as "Website Signup Protection" module. It added some validation and verification to the signup process and I haven't gotten any fake accounts since I installed it. 

Avatar
Descartar
Mejor respuesta

I get the same thing and also looking for a solution. These spam signups eat more than half my daily limit of emails on Odoo Online (200 emails per day). Following.

Avatar
Descartar
Publicaciones relacionadas Respuestas Vistas Actividad
0
mar 15
3646
0
mar 15
4728
0
jun 22
5250
2
jul 25
1331
3
jul 25
4318