New Security Issues?

[K Baker]

Have there been any new security issues? I am using 3.0 and got some nonsense orders today (just free add ons without the customer making any choices, no actual merchandise or payments)
Seems almost as if the orders were computer generated and specifically geared towards 'free' stuff.
Is there a way to protect the cart against this bogus order stuff?

[Jamie]

There have been no security issues discovered in any version of Squirrelcart since version 3.2.1. Most of the security issues for that version and prior versions were minor coding issues we discovered and issued fixes for.

The only way this could be a security issue is if they did something that was not possible by normal means. I do see free items on your site, so it seems it would be possible for someone to orders those with bogus info. They were probably playing with your store. If it is possible for someone to sit down at a computer and complete an order with the same details as the orders you are seeing, this would not be a security issue. If they persist, you might want to block their IP address in your web hosting control panel so they can't access your site using the same computer.

I get loads of fraudulent orders, but those do not imply a security problem, just a load of people trying to cause problems. If you do find any evidence that you have a security issue, send the info in a helpdesk ticket (no charge) and we can look into it.

[K Baker]

Thanks! That makes me feel better.