PrestaShop Customer register spam protection

As you already know main feature of this plugin is feature to block fake customer register attempts. Module blocks spammers with success thanks to its spam identification algorithm and external api from StopForumSpam service. Thanks to this is blocks up to 99% fake spam customer creation attempts.

How it identifies SPAM?

Each time someone creates an account in shop module checks the register attempt details and logs it in module's database

If some IP address or email address will be identified as SPAM attempt - module blocks register and bans IP of spammer

Spam identificaiton algorithm

Module has own internal algorithm to identify fake mass cart cration attempts. How does it work? Usually spam attempts come from the same IP. Module analyses the traffic and if some ip address will reach the defined limits (you can control the sensitivity) - it will start to block all attempts from this ip.

Control the sensitivity of algorithm

Module configuration page has feature to control the sensitivity of spam identification algorithm. Sensitivity is based on time frame and on number of customer register attempts in the indicated time frame.

Support of reCaptcha

One from spam identificatio nmethods is a google's reCAPTCHA feature. It's well know feature to protect websites and forms on websites against spammers / bots. In this module you can use both reCAPTCHA v2 (well known checkobox "im not a robot") or reCAPTCHA v3 (automatic protection that does not require any kind of verification for real visitors)

Support of external spam identification service

Module has feature to support StopForumSpam service Api. How does it work? Let's describe what the StopForumSpam feature is.

 Stop Forum Spam is a free service  that records reports of spam on forums, blogs and wikis to name a few. All these records are then made available to you search and view but most importantly, to access in an automated way to block suspected spammers before they can get in the front door. Everyone is familiar with more traditional "solve the word" systems to prevent abuse, Stop Forum Spam is a targeted and specialsed solution to help stop abuse of your website.

 

In addition we decided to add support of CleanTalk service. For free!

CleanTalk is a Cloud-Based spam filtering service that allows you to protect your website from spam. CleanTalk provides spam protection that invisible to visitors without using captcha or other methods when visitors have to prove that they are real peoples.

CleanTalk provides cloud anti-spam solutions for CMS and we developed plugins for the most of popular CMS: WordPress anti-spam plugin, Joomla anti-spam plugin, Drupal and etc. With our simple cloud spam checker, you can be sure your website is protected from spam bots, spam comments, and users.

So, when someone try to create an account in shop - module checks this customer register attempt with StopForumSpam api. This feature identifies even 99% of spam attempts and thanks to this - you can block spammers with success. So we strongly recommend to use it.

Whitelist feature

Moduł umożliwia wykluczenie zdefiniowanych adresów IP z procesu sprawdzania SPAMU. Dzięki temu, dla wybranych adresów nie zostanie zainicjowana funkcja weryfikująca numer IP w serwisach identyfikujących SPAM.

Protection type

If module will identify register attempt as a spam attempt, you can:

1. Block ip address of spammer  - it will not have possibility to reach your website. You - as a merchant - have possibility to manage banned ip addresses, you can unban selected ip addresses, add bans manually etc.
2. Block possibility to create customer account from IP  - banned visitor will have possibility to reach your website but register form will be blocked. So each customer creation attempt from this ip will be blocked automatically
3. Send email to shop owner  - module has feature to send email with information about fake customer register attempt each time it will identify fake customer creation attempt
4. Create 301 redirection  that will confuse spam/bot. Usually spam systems are based on database where spammers store vulnerable urls. If there will be 301 redirection - your url will be removed from spammers database