Craft Posted August 24 Share Posted August 24 (edited) Hello, I've hidden the registration fields (Address 1, City, State, Postal Code, and Phone Number) by CSS. I found a hacker or someone who has a script that allows him to register and add values to the hidden fields! Any solution for this issue? Could someone help me write a hook that doesn't allow him to complete the registration if adds value in those fields? Edited August 24 by Craft 0 Quote Link to comment Share on other sites More sharing options...
bear Posted August 24 Share Posted August 24 As suspected with the scripted fake order issue (there's been some discussions here lately), they're not using the page to submit, but instead likely submitting directly to the back end script instead. A potential fix from WHMCS might be to force a local referrer check using a locally generate one time salted "key" on the registration page, maybe. No matching key, the order/registration gets kicked out. 0 Quote Link to comment Share on other sites More sharing options...
Craft Posted August 25 Author Share Posted August 25 I'm still looking for a solution I can do 🙂 0 Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.