That's a good question. I'm not sure what is the answer. I'll do some research in Google and get back to you if I got an good answer. You should email the people at iPage as they probably know..
Thanks for your response..
We kinda thought they were spoofing the IP, so tracing it didn't do us much good. Where can I find the httpd.conf file?.
This guy is adding one item at a time to our cart, until he gets quite a few items in there. Then he just stays in the cart, changing and updating quantities, and only occassionally going back into the iPage site to add a new item..
I tried renaming shopping_cart.php for a while, but he stayed in there, and then came back later anyway...
No, I don't think you want to block it. It's probably a spider, and blocking it could mean losing some important seach engine listings in the future..
Post the IP address here, and we might be able to tell you what bot it is..
A better solution would be to change all of your 'buy now' links to forms so that the bot cannot add items to your cart...
The IP address is 184.108.40.206, registered to Microsoft in Redmond, WA..
And how do I change the Buy Nows to forms?.
Does a bot come and go for days? Or stay on continuously until it's done? If it gets aborted during it's visit, like if the server goes down or gets rebooted, does the bot come back and start over? Or pick up where it left off?.
This is all so new and very frustrating. Once I know what it is, I can deal with it a little better...it's the not knowing that killing me..
I appreciate your time to respond and all the expertise out here..
This post has been edited by.
: 17 June 2004, 14:16..
Yes, that is most certanily microsofts new bot, and yes, it will come and go as it pleases. We see it all the time as well..
I believe there is a contribution to change all the buy now links to forms...
Thank you! I was so worried we had been hacked! So, if I change the Buy Nows to forms, then it won't add stuff to the cart, right?.
Then, hopefully, it won't deny service to those wishing to shop on my site?.
This is most likely msnbot. Easy solution is to edit your spiders.txt file and insert a line:.
Then upload it. Make sure that "Prevent Spider Sessions" under Sessions in admin is set to True...
But wouldn't that prevent the spiders and bots (are they one and the same??) from crawling our site? And don't we WANT them to, for search engine placement?..
It doesn't prevent spiders from crawling the site, it just prevents them from getting SIDs. The bot will then spend a lot less time on your site, and your search results will be better..
You should also add shopping_cart.php to your robots.txt file, along with any other pages that you don't want the search engines to index. That will help reduce the load on your server..
And no session ID means no "adding to cart"...
Where is this robots.txt file that was mentioned a couple of posts ago? I don't seem to have it in my MS2.2 installation..
Robots.txt is not part of osC. It is a file you can add at the top level of your web iPage site to globally control how search engine spiders scan your site. See.
What was discussed was spiders.txt, a file in catalog/includes in 2.2-MS2. This is a list of spiders/robots which are to be denied a session ID, so they can't add products to the cart and, more important, the URLs they index won't have SIDs..
This post has been edited by.
: 22 June 2004, 21:32..
Hi, kinda new to this stuff. Got my iPage site up about 4 months ago, and have been running great. This past Saturday, we had a "user" online for over 15 hours, racking up $7000 in the shopping cart, one item at a time. Then they went away..
They came back Sunday and were online until Monday evening, non-stop, when the server finally crashed. We have been offline for the better part of 4 days now, with the iPage site up for only a few hours at a time..
My iPage hosting company wrote some code in the .htaccess file to block the IP, but the user came back. The IP is registered to Microsoft, Redmond, WA. It is almost Wednesday midnight, and the joker is still online, racking stuff up..
Is this a hacker, or a Denial of Service attack, or one of those googlebot thingies? Or something else? How can I stop it? What should my iPage hosting company be doing about it? Is there some place I can put a time limit on the shopping cart, where if they haven't checked out after an hour or so, it kicks them off? Even if they are adding stuff to their cart and being active?.
We just launched a new product line Thursday night, and our iPage site has been mostly down since then. I really need some help here ...please and thank you!.
It actually needs to be blocked via the httpd.conf file, is the best spot. what does the server access log say?.
You can block a range, which may give them a hint. could be that your server is 'posessed', where someone could have hacked it, and that tons of people are actually coming from an ip via washington. the ip is probably a 'spoofed' one, where it looks like it is coming from there, but it really isnt...