Is there a way to prevent brute force attacks on the discount code input eg limit the number of discount codes a customer can enter a day?

  • 1
    If it's enough to rate the limit per IP, then you can set up a rule in your Web Application Firewall so that each IP can access the checkout/cart/couponPost URL for example 10 times in 24 hours. Or even /checkout/cart but you might be careful with this so that you won't block customers from actually really buying things. – Anna Völkl Jan 22 at 7:16

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.