Waiting List - Strange Issue, Bot attack?

Hi,
I've been experiencing a strange issue today - fake users are registering multiple times (up to 3 times) for the waiting list on events that have already had their registrations close (one event in the recent past, another that starts tomorrow). This morning after noticing the first few fake additions to the waiting list, I disabled the waiting list feature. This evening, there were 2 more fake additions to the (disabled) waiting list.

I have now changed my password on Joomla and disabled other admins other than myself. I have no other users accessing the backend.

Any insight into what's going on? Has my system been compromised in some way? How have they been accessing the waiting list if it is disabled? Should I be concerned?

Thanks in advance,
Bryan

Hi Bryan

The long terms solution for this problem will be adding captcha script to the waiting list page. It will take me some time to implement this feature. So for now, please submit a support ticket so that I can disable this feature (in the code) for you to avoid spam.

Tuan

Hi can you post hints as to what files need modifying to do this
Thanks

The solution is can be solved as follow :

1. Open the file components/com_eventbooking/controller.php

2. Find the code below :

3. Change it to :

As I mentioned, this is just a temp solution. We will need to add captcha to waiting list paid to prevent bots attack.

Tuan

Thanks for the info Tuan.

In the end, I disabled the feature for a couple of days, then re-enabled it and things seem like they've been fine since then. Thus, I haven't submitted the support ticket. The waiting list is a valuable feature for me so I'd prefer to keep it enabled if I can.

Captcha added to a future update will be appreciated.

Cheers,
Bryan

OK Bryan. Will have it added to the extension soon. Give me 1 or 2 weeks from today.

Tuan

hi,

can you tell me if captcha is now available for the waiting list function?
thanks!

It should be available in the next two days. We just started working on it. Please wait for us !

Tuan

perfect!! please reply on this thread so I (and all your other customers) will know

thanks Tuan!

great timing as I just turned on the waiting list for an event today

also did you implement being able to move a register from wait-listed to attending via the backend?