genaker / magento2_payment_bot_block Goto Github PK

Hi, just added this to magento and was wondering, would it be possible to trigger an alert to a customisable email address when the limit is reached with say user ip browser etc?

Hi @Genaker

We are attacked with different cart IDs and not the same cart ID used multiple times. It is like a script is running and adding product to the cart and visit the API.

Will it be fixed by this plugin? Also, doesn it support Magento version 2.3.5-p2

The current module does not prevent a single IP address from generating many carts and proceeding to check out on each of them. As a consequence, if the attacker generates a cart and checks out, they are not stopped until they use the same cart again 20 times.

If you're open to pull requests, I'll write the code to prevent a same-IP attacker and make the request.

Thanks

Am I doing something wrong, or is this repo not able to be added to composer with vcs since the composer.json isn't actually in the root of the repo?

"repositories": { "amasty": { "type": "composer", "url": "https://composer.amasty.com/community/" }, "0": { "type": "composer", "url": "https://repo.magento.com/" }, "1": { "type": "composer", "url": "https://packages.shipperhq.com" }, "2": { "type": "vcs", "url": "[email protected]:Genaker/Magento2_Payment_Bot_Block.git" } },