6 Replies Latest reply: Oct 31, 2014 6:14 AM by Bev@mcr RSS

    How do these new customers get dumped into my database?

    Bev@mcr Community Member

      I have noticed for some time that my CRM database is being populated with customers that I haven't entered or imported. They populate only two fields, a surname that appears to be poor concatenation of first and last name, and an email address.

      This happened once before when I had one form that did not include Captcha code, which I have since corrected.

      I have no idea why this is happening now, but there is one circumstance worth reporting: About half of the latest batch of mystery customers are featured in Dashboard under the Live Feed report, as having posted to forum topic Generic Cephalexin Fda. The problem with that is, there is no forum topic Generic Cephalexin Fda. We're a computer consulting firm, not a pharmaceutical.

      Any ideas on what's happening, and how I can get it to stop?

        • 1. Re: How do these new customers get dumped into my database?
          Liam Dilley CommunityMVP

          Hi there,

          First up is to understand how the CRM works.

           

          When someone fills in any form on your site, they are entered into the CRM. This is a critical core feature of the system.

          You will have a form on your site somewhere with a field for fullName and an email address and description area and nothing else, maybe to sign up to a newsletter. With that, you are being spammed because you likely do not have the catpcha and ccSecurity module on the form.

          You will need to track down the form, add the appropriate catpcha etc to the form.

           

          If you are using comments you need to ensure your spam controls etc are up and you are controlling and managing that.

          • 2. Re: How do these new customers get dumped into my database?
            Bev@mcr Community Member

            There is one form, the login, that does not have a captcha, but it is not one I created or have access to. It is automatically called up when a user goes to a secured site. I can’t even get the name of it to go looking for it because the url-line shows the address of the page I’m trying to open, and not the intermediate login screen.

            • 3. Re: How do these new customers get dumped into my database?
              Liam Dilley CommunityMVP

              A login form will not do this. I am not sure what you mean with the url, does not quite make sense, sorry.. But you will have something else on your site.

              • 4. Re: How do these new customers get dumped into my database?
                Bev@mcr Community Member

                We have 3 forms on our site, not counting the login, and all of them have Captcha installed. I just went systematically through the site, clicking on every menu and link, and there are no other forms. Also, the news items (from News Module) do not include the option to allow comments, something I turned off precisely because I was getting flooded by spam.

                One thing I noticed from the review is that the service request form has a more up-to-date captcha field, while contact and newsletter subscription forms still have the old style (gray box with 6 characters). Could that have anything to do with this?

                • 5. Re: How do these new customers get dumped into my database?
                  Liam Dilley CommunityMVP

                  So there are 3 forms now,Ok

                  Captcha, especially if you have just the basic one, and do not have the {module_ccsecurity} module on the forms you will still get spammed. Either the farms of people manually filling in forms with the spam or OCR (Bots that read the image by math) bots.

                  If you have a new form it would be reCaptcha, that is one method, but you also have settings in the admin under - settings - captcha to make the cpatcha harder to read by the bots.

                   

                  So you Know..

                  A bot goes to your site, fills in the form and sees the captcha, what it will do is then try to read the image. They do this because you have pixels (squares) that form your image, a captcha has two colours or clear distinction - background and text colours. It will form a map basically of the characters, translate that into text and use it to fill out the captcha.

                  The smarter ones do even more of that now.

                  • 6. Re: How do these new customers get dumped into my database?
                    Bev@mcr Community Member

                    And the problem is fixed! Thank you!