Skip to Content
Menu
This question has been flagged
6 Replies
1817 Views

Hi all, 


for some weeks, my database is being misused by someone that creates new portal users on a daily basis. So far, more than 1000 accounts have been created. Their names are always bogus but the email addresses sometimes seem real, sometimes not.


Do you have any idea how to stop this? / Block the Attacker? Its probably harmless, as these users are followers nowhere but its annoying to the whole company as they keep popping up in many2one fields.


Avatar
Discard
Best Answer

Hi everyone,

having the same problem as well and it seems like the community is working on it. Here's the discussion : https://github.com/odoo/odoo/pull/190196

its about implementing Google Recaptcha and potentially Cloudflare Turnstile (definitely on signup and login views)

Avatar
Discard

When is this fix going live? In Odoo 18.1? Or later?

Best Answer

Hi,
Have a look at this thread:  https://github.com/odoo/odoo/pull/185648
Thanks

Avatar
Discard
Best Answer

Hi Friedrich

Such jobs are done by requests or api, one good solution is to activate the reCAPTCHA if did not yet so you can block robots from do it it

you can also integrate clodflare captcha or a honeypot strategy


If this persists, you still have the possibility to force email confirmation when sign/up or SMS confirmation or force 2FA for your account

In this case, an account will be active only when it's legit


Advanced option: Block IP's where accounts are created within x minute

block geolocation of IP where you do not run your business


hope this helps

Avatar
Discard
Best Answer

I have a solution that seems to be working for my instance (Odoo 16). I posted it in the Odoo App store as "Website Signup Protection" module. It added some validation and verification to the signup process and I haven't gotten any fake accounts since I installed it. 

Avatar
Discard
Best Answer

I get the same thing and also looking for a solution. These spam signups eat more than half my daily limit of emails on Odoo Online (200 emails per day). Following.

Avatar
Discard
Related Posts Replies Views Activity
0
Mar 15
3646
0
Mar 15
4728
0
Jun 22
5249
2
Jul 25
1331
3
Jul 25
4318