Conversation
supportWe have had an issue with a bot uploading multiple files directly to the code without submitting a form over 9000 times in the past 24 hours. I am working to mitigate this in a variety of ways, but there should be some checks added to the code to prevent upload without a form postback. There are no form submissions for these uploads which were originally brought to our attention when the host took our site offline due to the large volume of traffic to the server. It’s from a rotating list of IPs so blocking IPs directly hasn’t worked well.
Also, I do not have ‘pdf’ as an allowed file type: Allowed File Types: .3ds, .bw2, .dwg, .dxf, .fc2, .fc3, .jpg, .png, .ppj, .r2x, .rar, .rhx, .rvt, .skp, .zip. but can still upload pdfs.
Hello @efishinsea , It’s likely that the issue was caused by an injection somewhere else and not through the form itself. Could you please provide a screenshot or the path of the affected files where the code was added (for example, wp-content/uploads/wpcf7_dnd_uploads )? Does your hosting provider have any logs or information available that could help us trace the source of the issue or identify the specific file that introduced it? if you have any information you can send directly through my email glenmongaya@gmail.com do not post it here. The plugin is actively maintained and regularly reviewed by security teams, including Patchstack and Wordfence. At this time, we are not aware of any issues related to this. Please let me know.
done.
We just had this same issue. Any update on what couldve caused this? They uploaded thousands of PDFs without any submissions and Google started indexing them as well.
I did not get any resolution directly from the plugin itself but have been hoping for some feedback. Email glenmongaya@gmail.com and tell him the specifics of what you have seen, though it sounds exactly what we experienced too. Our host added some rules in their DNS settings to help slow down the uploads and you can add this in your .htacess will help with the referrer spam: <IfModule mod_rewrite.c> RewriteEngine On RewriteCond %{HTTP_REFERER} utm_source=chatgpt\.com [NC] RewriteRule ^(.*)$ - [F,L] </IfModule>
Ok thank you
Also, I do not have ‘pdf’ as an allowed file type: Allowed File Types: .3ds, .bw2, .dwg, .dxf, .fc2, .fc3, .jpg, .png, .ppj, .r2x, .rar, .rhx, .rvt, .skp, .zip. but can still upload pdfs.
Hello @efishinsea , It’s likely that the issue was caused by an injection somewhere else and not through the form itself. Could you please provide a screenshot or the path of the affected files where the code was added (for example, wp-content/uploads/wpcf7_dnd_uploads )? Does your hosting provider have any logs or information available that could help us trace the source of the issue or identify the specific file that introduced it? if you have any information you can send directly through my email glenmongaya@gmail.com do not post it here. The plugin is actively maintained and regularly reviewed by security teams, including Patchstack and Wordfence. At this time, we are not aware of any issues related to this. Please let me know.
done.
We just had this same issue. Any update on what couldve caused this? They uploaded thousands of PDFs without any submissions and Google started indexing them as well.
I did not get any resolution directly from the plugin itself but have been hoping for some feedback. Email glenmongaya@gmail.com and tell him the specifics of what you have seen, though it sounds exactly what we experienced too. Our host added some rules in their DNS settings to help slow down the uploads and you can add this in your .htacess will help with the referrer spam: <IfModule mod_rewrite.c> RewriteEngine On RewriteCond %{HTTP_REFERER} utm_source=chatgpt\.com [NC] RewriteRule ^(.*)$ - [F,L] </IfModule>
Ok thank you