Block IP Address through Review Baskets Module

[SidFeyDesigns]

I was wondering if there is a way to figure out an IP address through the Review Baskets Module.

For the past few months we have been getting a ton of baskets with an obviously fake name.

Basket totals are only including shipping so whoever or whatever is adding stuff to the basket, going through checkout, but not ordering and then emptying the basket.

I have attached a screen shot.
image_1939.jpg

I was just trying to figure out a way to find an IP address so I can combat this a little bit.

Thanks.

[Bruce - PhosphorMedia]

If you have an unused customer field, like Fax (cough cough), then stuff the ip address into that field as a hidden input. (And then go to Dream features and ask that custom customer fields be added to review baskets :) )

[SidFeyDesigns]

Bruce - PhosphorMedia haha. I'm going to guess what I have asked should have been posted there first...

[ILoveHostasaurus]

Can you use deferred baskets? Should prevent empty baskets from being created to begin with, if you don't need to have items removed from inventory immediately upon someone adding to basket.

[ILoveHostasaurus]

Cloudflare could help too; typically review spammers have identifying characteristics that their web app firewall would block with its browser signature check. Could apply more specific filtering to the review post URL.

[SidFeyDesigns]

ILoveHostasaurus we actually already use deferred baskets.

These are baskets someone is creating and then emptying after step 2 of check out because the customer info is entered and the basket total is just the shipping amount.

It could also be their browser clearing the cart. Pretty sure if using Safari on ios, your cart will be empty if you create one and then either leave the tab open for too long, or close the browser and reopen it after a long period of time.

We do use Cloudflare. The problem is I need to figure out this user's IP address.

Just trying to see if there is a way to do so within Miva.

Thanks though.

[ILoveHostasaurus]

If they come in bursts and it's from a single IP and/or ISP, we can get that out of the logs fairly easily, should show up in Cloudflare console too if you drill down. We can help with both.

[SidFeyDesigns]

ILoveHostasaurus

They do seem to come in bursts.

And okay that would be great.

I should open a ticket for that I would assume?

Thanks.

[alphabet]

You can email yourself a notification if the the user is using the emptybask action from the BASK page.

At the bottom of the bask page add:

<mvt:if expr="g.action EQ 'EMPTYBASK'">
    <mvt:assign name="g.emptybask_ip" value="s.REMOTE_ADDR" />

    <mvt:assign name="g.to_email" value="g.store:email" />
    <mvt:assign name="g.from_email" value="g.store:email" />
    <mvt:assign name="g.subject" value="'Empty Basket IP" />
    <mvt:assign name="g.message" value="'Empty Basket IP: ' $ g.emptybask_ip " />

    <mvt:do file="g.module_library_utilities" name="g.email_sent" value="SendEmail(g.to_email,g.from_email,'',g.subject,'',g.message)" />
</mvt:if>

[ILoveHostasaurus]

ILoveHostasaurus

They do seem to come in bursts.

And okay that would be great.

I should open a ticket for that I would assume?

Thanks.

Yep; or just shoot me an email, should be quick and easy.

[SidFeyDesigns]

Yep; or just shoot me an email, should be quick and easy.

Okay I will do that next week. We have to get through the Valentine's Day last minute rush this week.

Thanks!

[SidFeyDesigns]

ILoveHostasaurus just a heads up I will be shooting you a message in regards to this later today.

We might be implementing the netblazon address validation module soon.

Since it is billed by how many calls made to validate addresses, it will be a good idea to combat the check out spam as much as possible.

Thanks and talk soon.