PHP v7.0.5

Short of a reCAPTHCA or IP blocking, is there a script or setting to force a minimum number of characters when making a purchase? I have a customer who is getting spammed and blocking the IP is not working as whomever is doing it is changing anonymous proxy servers. In every case, they are only entering one letter in each field of the billing page, an 'e'. The only field that is complete is the email which is obviously bogus, but always the same; sample@email.tst which I have seen before in others bogus order attempts.

Marshall
CENLYT Productions - ms designs
Affordable Web Design
Custom Ecommerce Designs
Responsive Websites
Cenlyt.com

Hi Marshall
There isn't a built in way to do this, but is it just a case of selecting these orders once in a while and deleting them? I get the idea that if you forced two characters they would just input three.

Vince

Click Here for Shopping Cart Software
Click Here to sign up for our newsletter
Click Here for the latest updater

quote:

---

I get the idea that if you forced two characters they would just input three.

---

I get that. But how are they bypassing the Select State drop down? 'e' is all that appears there.

Marshall
CENLYT Productions - ms designs
Affordable Web Design
Custom Ecommerce Designs
Responsive Websites
Cenlyt.com

It's likely the bot is not going through your checkout at all. Just submitting data to your form.
I had it bad once, and orders were coming in with 50+ line items in a matter of seconds. Delete that one, and another right behind it with 50+ line items, in seconds.

Sounds like you have the netsparker bot maybe.

If the IP block won't cut it, I would (if it was my site) turn on captcha for a day, and then turn it off to see if the bot is gone.
It will usually leave in a day or two.