Tell a friend security warning

Message Topic Search Topic Options Post Reply Create New Topic Printable Version Translate Topic

Today I received a security warning on one of my stores. (below)

Store administrator,
Someone has attempted to 'tell a friend' more than 3 times. User information is:

The point of concern that I have is that I have the tell a friend feature turned off on both of my stores. To get to tell a friend someone needed to know the exact file and directory to go to.

What is the best approach to take?

Do I want to change the name of/ remove the tell a friend asp file?
If so, is it just the one file or are there more?

Dave

Author	Message Topic Search Topic Options Post Reply Create New Topic Printable Version Translate Topic
Dayv3 Members Profile Send Private Message Find Members Posts Add to Buddy List Newbie Joined: 07-June-2009 Location: United States Status: Offline Points: 11	Post Options Post Reply Quote Dayv3 Report Post Thanks(0) Quote Reply Topic: Tell a friend security warning Posted: 14-August-2013 at 3:56am
	Today I received a security warning on one of my stores. (below) Store administrator, Someone has attempted to 'tell a friend' more than 3 times. User information is: The point of concern that I have is that I have the tell a friend feature turned off on both of my stores. To get to tell a friend someone needed to know the exact file and directory to go to. What is the best approach to take? Do I want to change the name of/ remove the tell a friend asp file? If so, is it just the one file or are there more? Dave

Dayv3 Members Profile Send Private Message Find Members Posts Add to Buddy List Newbie Joined: 07-June-2009 Location: United States Status: Offline Points: 11	Post Options Post Reply Quote Dayv3 Report Post Thanks(0) Quote Reply Posted: 14-August-2013 at 4:39am
	A little research shows that my unwanted friend: * START - IP INFORMATION **************** HTTP_CLIENT_IP: HTTP_X_FORWARDED_FOR: REMOTE_HOST: 198.100.144.195 REMOTE_ADDR: 198.100.144.195 USER IP ADDRESS: 198.100.144.195 * END - IP INFORMATION ********************** As per stopforumspam.com has 542 entries for the above ip address. The concern that I have is that he may be looking for (or targeting) product cart stores because he needed to know the direct path to the tell a friend .asp file to access the feature because I have tell a friend turned off. I called my hosting company and black listed this ip address.

Hamish Members Profile Send Private Message Find Members Posts Add to Buddy List Admin Group Joined: 12-October-2006 Location: United Kingdom Status: Offline Points: 56	Post Options Post Reply Quote Hamish Report Post Thanks(0) Quote Reply Posted: 14-August-2013 at 4:59pm
	Hi, If you are not using tellafriend you can safely rename the file.
	Editing ProductCart Code? See WIKI Guidelines for Editing ProductCart's ASP Source Code