HOW TO ENABLE ANTI-BOT PROTECTION
Anti-Bot Configuration User Guide
The Anti-Bot feature is organized into five tabs. Follow these steps to configure each defense layer effectively.
Use this tab to permanently reject orders from specific abusive IP addresses.
- Navigate to the Anti-Bot section and click the Block IP addresses tab.
- In the main text area, enter the IP addresses you wish to block.
- Crucial Formatting: Enter only one IP address per line.
- Example:```
120.1.1.10
120.1.1.11
...
3. Ensure there are no unnecessary spaces or tabs around the IP addresses.
4. **Save** your settings before navigating away.

|| Step 2: Block Phone Numbers (Blocking Known Fraudsters)
Use this tab to reject orders from known fake or spam phone numbers.
1. Navigate to the **Anti-Bot** section and click the **Phone Numbers** tab.
2. In the main text area, enter the phone numbers you wish to block.
* **Crucial Formatting:** Enter **only one phone number per line**.
* **Recommendation:** For international blocking, use the phone number **with its country code prefix** (e.g., `+996...`).
3. **Save** your settings.

|| Step 3: Orders Limit (Velocity Control)
This is the central defense against rapid, repeated orders from the same user (rate limiting).
1. Navigate to the **Anti-Bot** section and click the **Orders limit** tab.
2. **Enable the Feature:** Toggle the switch next to "Orders limit" to the **[ENABLED]** position.
3. **Set the Rate Limit:**
* In the "Allow only 1 order every..." dropdown, select the desired time interval (e.g., **15 min**, **30 min**, **1 hour**). This limits orders based on **IP, phone, and email**.
4. **Set Quantity Limit (Optional):**
* In the **Quantity limit** field, you can set a maximum number of items per order (e.g., enter `5` to limit all orders to 5 items). Use **No limit** as the default.
5. **Configure IP Whitelist (Exceptions):**
* In the **Whitelist IP Addresses** box, enter IP addresses that should **bypass** the velocity control (e.g., your own office IP or testing IP). Enter one IP address per line.
6. **Save** your settings.

|| Step 4: Countries Limit (Geographic Control)
Use this to restrict order placement to specific countries.
1. Navigate to the **Anti-Bot** section and click the **Countries limit** tab.
2. **Define Allowed Countries:**
* In the **List Allowed countries** text area, enter the names of the countries you *allow* orders from (e.g., `Spain`, `France`, `Germany`).
* **Crucial:** If you want to allow orders from **All countries**, leave this box **completely empty**.
3. **Save** your settings.

|| Step 5: Google reCAPTCHA Integration (Human Verification)
This step provides the strongest defense by requiring users to pass a Google verification. **This requires external setup.**
||| Part A: Obtaining Keys (External Google Setup)
1. Click the **Google reCAPTCHA** tab.
2. Click the **CREATE GOOGLE reCAPTCHA KEYS** button to be taken to the Google Admin Console (you must be signed in with a Google account).
3. **Register a New Site:**
* Label it (e.g., "COD Form Live").
* Select the reCAPTCHA type (e.g., **reCAPTCHA v2 "I'm not a robot" Checkbox**).
* Enter your store's **domain(s)**.
4. Once registered, **copy the Site Key** (public) and the **Secret Key** (private).
||| Part B: Configuration in App
1. Return to the **Google reCAPTCHA** tab in your Anti-Bot settings.
2. **Enable the Feature:** Toggle the switch to **[ENABLED]**.
3. **Enter Keys:**
* Paste the **Site Key** into the corresponding field.
* Paste the **Secret Key** into the corresponding field.
4. **Customize Error Message (Optional):** Update the **Error Message** that appears if the reCAPTCHA is failed (Default: `Please complete the reCAPTCHA`).
5. **Save** your settings.

Updated on: 13/11/2025
Thank you!
