Feature Requests
Share ideas, discuss and vote on requests from other users in community
 
This object is in archive! 

Block user signups or account field changes by keyword

John MacKenzie shared this idea 6 years ago
Under Consideration

Ok so i know i cant be exploited since i patch right away but i still get several signups a week all with the same company name and then they try to change the address and opther fields to php code to try and work the old exploit. Will this is getting annoying and i think it would be a great feature to

1) be able to block user signups by certain keyword in the company and name fields at least.

2) be able to prevent a user from changing their contact information if it includes certain keywords such as password, or AES_Encrypt or other mysql type keywords.

thoughts

Comments (5)

photo
1

Do they use the same IP address to login, you could always block their IP address, or you could use php code to temp fix to prevent sign ups with that.

Also do they use the same email address domain, you could ban the email address domain?Just a temp fix if it is, however I do agree, just like the support ticket spam filter, it would be a great idea for sign ups - I only allow people to register if they order a service/product.

photo
1

sorry to not reply, no its different IP address (I know i can block ips), different emails, but name and company name are often consistent

photo
photo
2

I aree. We also get the same address changes and to the AES values. Please implement something like this. I think this would be a really great asset!

photo
1

yes, consider please.

photo
1

Definitely! I have hundreds of accounts with same data from those who try to hack us.