Tags/topics: 
2
Answers
Vote up!
0
Vote down!

Lots of Shopping Cart Order - Can it be Spam Bots?

All of sudden today I've started to get loads of orders that are just where a user has added to cart.

There doesn't seem to be any issues that would stop them going any further and they are all anonymous, and seem to come in rapid bursts.

This kind of behaviour is reminiscent to the problems we've had with spambots creating accounts.

So is it possible that a spambot could be doing this and if so are there any measures I could take to stop it?

Also is there a way to clean up these orders after a period time?

Asked by: dottodotdesign
on September 24, 2013

2 Answers

Vote up!
0
Vote down!

I've just realised that this must be because I have the qty field displayed and hitting the enter key on this field adds it to cart which is something I'm sure a spambot could easily do.

Answer by: dottodotdesign
Posted: Sep 24, 2013
Vote up!
0
Vote down!

Its possible it could be spam, but its hard to say. Perhaps people are getting confused after they add something to the cart. Have you included clear messaging for how to proceed to the cart?

There really isn't anything to do. You can't add a captcha form to the product, nor would that be user friendly or make sense to the user.

You could create a rule to delete a shopping cart after a specific amount of time has passed.

Also, if you don't mind spending a little bit of money, you could use programs like MouseFlow.com to visually see what people are doing on your site, and when you get a string of cart submissions, you could pull them up in MouseFlow to see what exactly is going on.

Travis
Answer by: Travis
Posted: Sep 25, 2013

Comments

It is definitely spam, I removed the quantity field and it stopped. The trouble I have with spambots seems to be quite a lot, for example over 1000 of the shopping cart orders were created over 4 hours. I use the Botcha module on all other forms which is very successful at blocking spambots but I've not found a way to use it with commerce because every add to cart form has a different id.

- dottodotdesign on September 25, 2013

Well if Botcha just needs an id to use, you could insert one using jQuery at the top div level of every add-to-cart field and then use that to target it.

- Travis on September 25, 2013

It's actually the form id it's needs, so could I do the same for that?

- dottodotdesign on September 25, 2013

Oh, no that won't work then. Hmm.

- Travis on September 25, 2013