I had a weird order earlier today that had a ton of stuff in it. I was some sort of bot. Here's what the contact info looked like:


Name:
Smith
Address:
3
City:
Chicago
State:
IL
Zip:
208.100.0.117
Country:
Great Britain
Phone:
5234534558

netsparker@example.com

I cancelled it but then I noticed that I'm getting several emails a minute via the "contact from website". Here's an example:


3

from: Smith
sent at (Pacific): 12/2/2018 1:18:11 PM
e-mail: -1 OR 1=1)) AND ASC(MID((Now()),1,1))<255


Anyone know how to stop these? I had over 1000 by the time I discovered it!

I've also just noticed that, from the Store Admin page, it shows 492 Gift Certificates. WAY more than I would expect. I show only 15 active.

You can try the trick I mentioned here https://www.ecommercetemplates.com/support/topic.asp?TOPIC_ID=110981 which tests for a UA.

Marshall
CENLYT Productions - ms designs
Affordable Web Design
Custom Ecommerce Designs
Responsive Websites
Cenlyt.com