Shopsite sent out an email recently warning about spammers using its "tell a friend" feature to send out email ( inserted below). I followed the instructions for disabling this feature, but the spam kept coming. Then I renamed the script tellafriend.cgi and the spamming seemed to stop. Now, 12 hours later I am still seeing a few ( 6 versus the 6,000 I had before) spams in my outgoing mail queue.
What else can I do to stop these abuses.??
M.
------------ shopsite's email....
tech-bulletin] ShopSite tellafriend.cgi used for Spam
We’ve recently had reports that the Tell A Friend feature is being used
by 3rd parties to send spam. We recommend that merchants do the following:
· If using ShopSite Manager or Pro version 10 sp1 or greater (sp2 or
v11) then under Merchandising > Social Media > Share with Friends select
the “Share with Friends” radio button instead of the “Tell a Friend”
option.
· If using ShopSite Manager or Pro versions 8 through 10 then under
Merchandising > Tell a Friend, disable the Tell a Friend feature.
If you are a hosting provider, besides telling your merchants to do the
above your other options are:
· Block the IP being used to access the tellafriend.cgi. Currently the
IP being used is 112.202.38.30
· Automatically switch off tellafriend or switch to Share with Friends.
To do this in v10 sp1 stores and greater edit the sbdata.aa file found
in the store’s data directory and set the "tellfriend_enabled:" token to
“0” to disable it or to “2” to set it to Share with Friends. For
example:
tellfriend_enabled: 0
In v10 stores and earlier set “tellfriend_enabled:” to no value instead
of “checked.” For example:
tellfriend_enabled:
· Remove the tellafriend.cgi until a patch is produced to resolve this
issue. Note that doing this in a v11 store will also prevent the
Facebook Store feature from working.