Listings with account id -1

Hello Rudi, i am using flynax 4.7

Today, i noticed that many listings have been added to listings table with account id = -1 and it will grows up nearly every few seconds!
The only way to stop it , is rename fl_listings table. Does it relate to cron job?

Please help!?

Hello,

Have you tried this solution? https://forum.flynax.com/showthread....ght=incomplete

Quote:

---

Originally Posted by Rudi

Hello,

Have you tried this solution? https://forum.flynax.com/showthread....ght=incomplete

---

Hello Rudi,

Yes, i have already used it.
As i use flynax 4.7 ,i had to change add_listing_inc.php like below, based on solution link.

Find:

Code:

---

Only registered members can view the code.

---

Change to:

Code:

---

Only registered members can view the code.

---

Also i changed cron file to remove all account_id < 0, but incomplete listings grow up very fast. Perhaps thousands records daily!
It happened suddenly from 2 days ago.

Posting an ad with registration, I have not had such a problem since I turned this on.

Quote:

---

Originally Posted by Jenő Kocsi

Posting an ad with registration, I have not had such a problem since I turned this on.

---

Thanks, i have already tested it, but it still adds incomplete listings with account_id = -1
Also i changed robots.txt

From:

Code:

---

Only registered members can view the code.

---

To:

Code:

---

Only registered members can view the code.

---

But no success!

Use the Bot blocking plugin.

In this case debugging is required

you need to create a ticket

Quote:

---

Originally Posted by Rudi

In this case debugging is required

you need to create a ticket

---

Hello Rudi,

After more investigation and reading server raw log, i was noticed that i am under attack by a lot of chinese IPs.
It is like a DDos attack and unfortunately web server admin does not help me. They believe that, they are responsible only about protecting server, and application protection is not their duty (and i think they are right).

I already installed Bot blocking plugin and added a lot of new bots to it, and no success.
Also i added new bad user agents to htaccess file and again no success.

Below are some sample URLs attack in log file with china source ip. I changed my website address to demo address for better understanding.

1. https://classifieds.demoflynax.com/u...-listing/cars/
2. https://classifieds.demoflynax.com/u...ct-a-plan.html

There are thousands URL attack like these ones.
If i disable Adding listings without signing up parameter in admin panel, it causes, all No.1 URLs go to sign up page which is an improvement.
But unfortunately, No.2 URLs cause a blank listing in listings table with account_id=-1, no matter enable or disable that parameter.
Also it does not depend on enable/disable Posting ads in one step parameter in admin panel.

For preventing all these, i had to block all china IPs in my htaccess file and also block all URLs ended with select-a-plan.html
But my htaccess file size is near 210K now.

Is there any better solution flynax?

Hello Bahram,

I have no idea what to suggest in this situation as a more detailed investigation is required

you'd better create a ticket and our developers will advise your further