Conversation
supportWould this be a good way to curb manual carding attacks? I have a security plugin to deal with bot attacks, but we have since gotten fake accounts created on our site so individuals can manually test card numbers. I would like to limit checkout attempts to ~5 attempts per hour, but since this plugin refers to the API endpoints, I wasn’t sure if this would apply to the default WooCommerce checkout. Unfortunately, we’re not using WooPayments, and if this option doesn’t end up being an option then I’ll reach out to our gateway plugin for support. Thanks a bunch!
We use a plugin called Checkout Rate Limiter to prevent carding attacks. Though it hasn’t been updated in a while, it works great and logs attacks it has stopped. Settings allow configurable time limit blocks for the first, second and third attempts which should work for you. See https://github.com/brianhenryie/bh-wc-checkout-rate-limiter/ for details.
We use a plugin called Checkout Rate Limiter to prevent carding attacks. Though it hasn’t been updated in a while, it works great and logs attacks it has stopped. Settings allow configurable time limit blocks for the first, second and third attempts which should work for you. See https://github.com/brianhenryie/bh-wc-checkout-rate-limiter/ for details.