Spammers logged, but could still register

  • Resolved jonkel

    (@jonkel)


    5 months, 1 week ago

    hi, we’re using Version 2.0.65 on WP 6.6.2 with PHP 8.0.
    We can see in the log entries that the spammers were logged, but they were still able to register.

    Is there a logging only mode? Do I have overlooked a switch to turn blocking on?

    Example Log-Info:

    user_login: www.ssgbnx.blogspot.bg - 44 171 EURO BTC wdc
    user_email: [email protected]
    redirect_to:
    wp-submit: Register
    Browser Data: browser_name:,browser_version:,platform_name:,device_type_name:,is_mobile:,
    Header Data: Accept:/,
    Timer Data: Form loaded: 17.10.2024 18:22:19 [1729189339.1655],Form submitted: 01.01.1970 00:00:00 [0],Time passed: -1729189339165 ms, -1729189339 sec,
    Timer Data PHP: Form loaded: 17.10.2024 18:22:19 [1729189339.1655],Form submitted: 01.01.1970 00:00:00 [0],Time passed: -1729189339165 ms, -1729189339 sec,
    Timer Data JS: Form loaded: 01.01.1970 00:00:00 [0],Form submitted: 01.01.1970 00:00:00 [0],Time passed: 0 ms, 0 sec,
    Log Message: multiple-submission-protection

    or

    user_login: www.ngdsgm.blogspot.de - 99 816 USD BTC uvw
    user_email: [email protected]
    redirect_to:
    wp-submit: Register
    Browser Data: browser_name:,browser_version:,platform_name:,device_type_name:,is_mobile:,
    Header Data: Accept:/,
    Timer Data: Form loaded: 17.10.2024 15:00:43 [1729177243.4911],Form submitted: 01.01.1970 00:00:00 [0],Time passed: -1729177243491 ms, -1729177243 sec,
    Timer Data PHP: Form loaded: 17.10.2024 15:00:43 [1729177243.4911],Form submitted: 01.01.1970 00:00:00 [0],Time passed: -1729177243491 ms, -1729177243 sec,
    Timer Data JS: Form loaded: 01.01.1970 00:00:00 [0],Form submitted: 01.01.1970 00:00:00 [0],Time passed: 0 ms, 0 sec,
    Log Message: multiple-submission-protection

    Help would be appriciated.

    Regards,
    jonkel

    • This topic was modified 5 months, 1 week ago by jonkel.
Viewing 2 replies - 1 through 2 (of 2 total)
  • Thread Starter jonkel

    (@jonkel)

    Found another log entry, which I don’t understand – why isn’t there any referring page/url?

    Browser Data: browser_name:Chrome,browser_version:78.0.3904.108,platform_name:Windows,device_type_name:Desktop,is_mobile:,
    Header Data: User-Agent:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36,
    Timer Data: Form loaded: 19.10.2024 00:54:08 [1729299248.496],Form submitted: 01.01.1970 00:00:00 [0],Time passed: -1729299248496 ms, -1729299248 sec,
    Timer Data PHP: Form loaded: 19.10.2024 00:54:08 [1729299248.496],Form submitted: 01.01.1970 00:00:00 [0],Time passed: -1729299248496 ms, -1729299248 sec,
    Timer Data JS: Form loaded: 01.01.1970 00:00:00 [0],Form submitted: 01.01.1970 00:00:00 [0],Time passed: 0 ms, 0 sec,
    Log Message: multiple-submission-protection

    Plugin Author Forge12 Interactive GmbH

    (@forge12)

    Hi,

    Thank you for your message, and apologies for the delayed reply. For faster support, feel free to contact us directly via email at [email protected].

    Regarding your issue, please ensure that the protection for WordPress registration is fully enabled. Additionally, make sure that both JavaScript protection and multiple submission protection are turned on. These settings should help block the registrations you’ve noticed in the log entries.

    Please note that “multiple submission protection” means the form was submitted multiple times, and while these extra attempts are blocked by the system, the first submission is still processed, which is why the registration went through as expected.

    Let me know if you need further assistance!

    Best regards,
    Marc

Viewing 2 replies - 1 through 2 (of 2 total)
  • You must be logged in to reply to this topic.