+ Reply to Thread
Results 1 to 9 of 9

Thread: Listings with account id -1

  1. #1

    Listings with account id -1

    Hello Rudi, i am using flynax 4.7

    Today, i noticed that many listings have been added to listings table with account id = -1 and it will grows up nearly every few seconds!
    The only way to stop it , is rename fl_listings table. Does it relate to cron job?

    Please help!?

  2. #2
    Flynax developer Rudi's Avatar
    Join Date
    Dec 2014
    Location
    Planet Earth
    Posts
    3,137
    Hello,

    Have you tried this solution? https://forum.flynax.com/showthread....ght=incomplete

  3. #3
    Quote Originally Posted by Rudi View Post
    Hello,

    Have you tried this solution? https://forum.flynax.com/showthread....ght=incomplete
    Hello Rudi,

    Yes, i have already used it.
    As i use flynax 4.7 ,i had to change add_listing_inc.php like below, based on solution link.

    Find:
    Code:
    Only registered members can view the code.
    Change to:
    Code:
    Only registered members can view the code.
    Also i changed cron file to remove all account_id < 0, but incomplete listings grow up very fast. Perhaps thousands records daily!
    It happened suddenly from 2 days ago.
    Last edited by Bahram Soltanirad; March 8, 2021 at 07:59 AM.

  4. #4
    Master
    Join Date
    Oct 2019
    Location
    Hungary
    Posts
    402
    Posting an ad with registration, I have not had such a problem since I turned this on.

  5. #5
    Quote Originally Posted by Jenő Kocsi View Post
    Posting an ad with registration, I have not had such a problem since I turned this on.
    Thanks, i have already tested it, but it still adds incomplete listings with account_id = -1
    Also i changed robots.txt

    From:

    Code:
    Only registered members can view the code.
    To:

    Code:
    Only registered members can view the code.
    But no success!

  6. #6
    Master
    Join Date
    Oct 2019
    Location
    Hungary
    Posts
    402
    Use the Bot blocking plugin.

  7. #7
    Flynax developer Rudi's Avatar
    Join Date
    Dec 2014
    Location
    Planet Earth
    Posts
    3,137
    In this case debugging is required

    you need to create a ticket

  8. #8
    Quote Originally Posted by Rudi View Post
    In this case debugging is required

    you need to create a ticket
    Hello Rudi,

    After more investigation and reading server raw log, i was noticed that i am under attack by a lot of chinese IPs.
    It is like a DDos attack and unfortunately web server admin does not help me. They believe that, they are responsible only about protecting server, and application protection is not their duty (and i think they are right).

    I already installed Bot blocking plugin and added a lot of new bots to it, and no success.
    Also i added new bad user agents to htaccess file and again no success.

    Below are some sample URLs attack in log file with china source ip. I changed my website address to demo address for better understanding.

    1. https://classifieds.demoflynax.com/u...-listing/cars/
    2. https://classifieds.demoflynax.com/u...ct-a-plan.html

    There are thousands URL attack like these ones.
    If i disable Adding listings without signing up parameter in admin panel, it causes, all No.1 URLs go to sign up page which is an improvement.
    But unfortunately, No.2 URLs cause a blank listing in listings table with account_id=-1, no matter enable or disable that parameter.
    Also it does not depend on enable/disable Posting ads in one step parameter in admin panel.

    For preventing all these, i had to block all china IPs in my htaccess file and also block all URLs ended with select-a-plan.html
    But my htaccess file size is near 210K now.

    Is there any better solution flynax?
    Last edited by Bahram Soltanirad; March 23, 2021 at 01:25 PM.

  9. #9
    Flynax developer Rudi's Avatar
    Join Date
    Dec 2014
    Location
    Planet Earth
    Posts
    3,137
    Hello Bahram,

    I have no idea what to suggest in this situation as a more detailed investigation is required

    you'd better create a ticket and our developers will advise your further

+ Reply to Thread