Odoo is the world's easiest all-in-one management software.
It includes hundreds of business apps:
We are under attack. We had over 6K "public user" shopping carts in an hour. Some bot is attaching the site. Any ideas how to stop them, set a script for to many requests per minute? We need something as this is filling our shipping department with tons of junk orders and using up resource. It's almost a brute force attack.
*Using Odoo SH and Odoo 12
use cloudflare...
I've had this happen twice now. Odoo12 CE.
You can see from the access logs numerous lines like this (X's are my own):
45\.227\.254\.6\ \-\ \-\ \[27/Jan/2022:01:42:22\ \-0500\]\ "GET\ /shop/cart/update\?category=1459\&csrf_token=XXXXXXXXXXXXXXXXXXXe3d651o1638288418\&product_id=4XXX\&product_template_id=XXXX%27%29 UNION ALL SELECT NULL\-\- NFmu\ HTTP/1\.1"\ 405\ 178\ "\-"\ "Mozilla/5\.0\ \(Windows;\ U;\ Windows\ NT\ 5\.2;\ de\-DE\)\ AppleWebKit/532\.0\ \(KHTML,\ like\ Gecko\)\ Chrome/\ Safari/532\.0"4.0.202.2
Does anyone find solution for this issue?
Create an account today to enjoy exclusive features and engage with our awesome community!
Sign up| Related Posts | Replies | Views | Activity | |
|---|---|---|---|---|
|
12
Sep 22
|
45087 | ||
|
0
Sep 22
|
3628 | ||
|
0
Mar 15
|
4308 | ||
|
Portal User Spam
Solved
|
|
6
May 25
|
1849 | |
|
0
Jul 23
|
2051 |
1. Use the live chat to ask your questions.
2. The operator answers within a few minutes.
I am having the same issue both for my odoo12 and 13 store. It is a small store and I have no idea how it attracts attacks. All the spam orders are under public user for the same product. Anyone have an solution?