Skip to content

Commit

Permalink
Adding more information.
Browse files Browse the repository at this point in the history
  • Loading branch information
tiagosampaio committed Aug 15, 2024
1 parent eb962f4 commit f501a68
Show file tree
Hide file tree
Showing 2 changed files with 11 additions and 1 deletion.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
12 changes: 11 additions & 1 deletion README.md
Original file line number Diff line number Diff line change
Expand Up @@ -9,6 +9,14 @@ Keep your Magento 2 store protected from suspicious and harmful requests with Ma
- Magento 2.3
- Magento 2.4

## Context

Have you ever seen any order like the following one in your Magento 2 website?

![alt text](https://github.com/magedin/magento2-module-trojan-request-blocker/blob/master/.github/assets/images/trojan_orders_in_magento2.jpg?raw=true)

In the fast-paced world of eCommerce, security is paramount. Recently, two of our clients, Orbus and Monkey Edge, encountered a serious security threat. Their Magento stores were targeted by trojan orders attempting to exploit vulnerabilities within Magento’s system. The attackers tried to inject malicious code through customer fields, such as the First Name and Last Name fields, with the aim of executing code when rendering the page.

## Installation

```bash
Expand All @@ -26,8 +34,10 @@ Keep your Magento 2 store protected from suspicious and harmful requests with Ma
- [Magento 2: Fake customer order came through with weird code instead of customer name](https://magento.stackexchange.com/questions/358839/magento-2-fake-customer-order-came-through-with-weird-code-instead-of-customer)
- [Despite "Allow Guest Checkout" set to "No" it's possible to place a guest order with the guest-carts REST API #36691](https://github.com/magento/magento2/issues/36691)

<br>

<div style="text-align: center;">
<a href="https://github.com/magedin/magento2-module-frenet/">
<a href="https://github.com/magedin/magento2-module-trojan-request-blocker">
<img src="https://raw.githubusercontent.com/magedin/assets/c0cd4f15cee6580c6c96848400cf089e91417529/images/logo/magedin_horizontal.svg?raw=true" width="200" alt="MagedIn Technology" title="MagedIn Technology"/>
</a>
</div>

0 comments on commit f501a68

Please sign in to comment.