[Skip to main content](#vessel-content) # Creation of Fake Carts ## - **[mohairbears](/forum/user/916-mohairbears "View mohairbears's Profile")** - [![mohairbears's Avatar](https://www.hikashop.com/media/kunena/core/svg/person.svg)](/forum/user/916-mohairbears "View mohairbears's Profile") Topic Author - [ Offline](/forum/user/916-mohairbears) Less More - Posts: 610 - Thank you received: 13 - 1 month 2 weeks ago - 1 month 2 weeks ago [\#373426](#373426) by [mohairbears](/forum/user/916-mohairbears "View mohairbears's Profile") *[Creation of Fake Carts](/forum/35-orders-management/910827-creation-of-fake-carts#373426 "-- HikaShop version -- : 6.6.0 -- Joomla version -- : 5.4.8 -- PHP version -- : 8.4 -- Error-message(debug-mod must be tuned on) -- : None Hi, I know this has been addressed a few times but, I now have 58,000 carts created since 2/9/26. The bots are creating them faster than they can be deleted! This is now getting ridiculous, there have to be a solution to this by now surely?? this is my current robots.txt file # If the Joomla site is installed within a folder # eg www.example.com/joomla/ then the robots.txt file # MUST be moved to the site root # eg www.example.com/robots.txt # AND the joomla folder name MUST be prefixed to all of the # paths. # eg the Disallow rule for the /administrator/ folder MUST # be changed to read # Disallow: /joomla/administrator/ # # For more information about the robots.txt standard, see: # www.robotstxt.org/orig.html # Allow all search engines to crawl all content Sitemap: www.xxxxx.com/index.php/component/osmap/...=xml&id=1&format=xml Allow: /google*.html User-agent: * Disallow: */add-1/cid* Allow: / User-agent: Amazonbot Disallow: / User-agent: RainBot Disallow: / User-agent: test-both Disallow: / User-agent: fidget-spinner-bot Disallow: / User-agent: thesis-research-bot Disallow: / User-agent: Pinterestbot Disallow: / User-agent: BLEXBot Disallow: / User-agent: DataForSeoBot Disallow: / User-agent: Mail.Ru Disallow: / User-agent: SemrushBot Disallow: / User-agent: Baiduspider Disallow: / User-agent: MJ12bot Disallow: / User-agent: Yandex Disallow: / User-agent: AwarioBot Disallow: / User-agent: ClaudeBot Disallow: / User-agent: Bytespider Disallow: / User-agent: GPTBot/1.0 Disallow: / User-agent: ClaudeBot Disallow: / User-agent: facebookexternalhit/1.1 Allow: / User-agent: Barkrowler Disallow: / User-agent: Turnitin Disallow: / User-agent: VelenPublicWebCrawler Disallow: / User-agent: GPTBot Disallow: / User-agent: DotBot Disallow: / User-agent: Owler Disallow: / User-agent: YisouSpider Disallow: / User-agent: ChatGLM-Spider Disallow: / User-agent: Barkrowler|netEstate Disallow: / User-agent: MojeekBot Disallow: / User-agent: serpstatbot Disallow: / Thanks")* was created by *[mohairbears](/forum/user/916-mohairbears "View mohairbears's Profile")* -- HikaShop version -- : 6.6.0 -- Joomla version -- : 5.4.8 -- PHP version -- : 8.4 -- Error-message(debug-mod must be tuned on) -- : None Hi, I know this has been addressed a few times but, I now have 58,000 carts created since 2/9/26. The bots are creating them faster than they can be deleted! This is now getting ridiculous, there have to be a solution to this by now surely?? this is my current robots.txt file \# If the Joomla site is installed within a folder \# eg [ www.example.com/joomla/](http://www.example.com/joomla/) then the robots.txt file \# MUST be moved to the site root \# eg [ www.example.com/robots.txt](http://www.example.com/robots.txt) \# AND the joomla folder name MUST be prefixed to all of the \# paths. \# eg the Disallow rule for the /administrator/ folder MUST \# be changed to read \# Disallow: /joomla/administrator/ \# \# For more information about the robots.txt standard, see: \# [ www.robotstxt.org/orig.html](https://www.robotstxt.org/orig.html) \# Allow all search engines to crawl all content Sitemap: [ www.xxxxx.com/index.php/component/osmap/...=xml&id=1&format=xml](https://www.xxxxx.com/index.php/component/osmap/?view=xml&id=1&format=xml) Allow: /google*.html User-agent: * Disallow: */add-1/cid* Allow: / User-agent: Amazonbot Disallow: / User-agent: RainBot Disallow: / User-agent: test-both Disallow: / User-agent: fidget-spinner-bot Disallow: / User-agent: thesis-research-bot Disallow: / User-agent: Pinterestbot Disallow: / User-agent: BLEXBot Disallow: / User-agent: DataForSeoBot Disallow: / User-agent: Mail.Ru Disallow: / User-agent: SemrushBot Disallow: / User-agent: Baiduspider Disallow: / User-agent: MJ12bot Disallow: / User-agent: Yandex Disallow: / User-agent: AwarioBot Disallow: / User-agent: ClaudeBot Disallow: / User-agent: Bytespider Disallow: / User-agent: GPTBot/1.0 Disallow: / User-agent: ClaudeBot Disallow: / User-agent: facebookexternalhit/1.1 Allow: / User-agent: Barkrowler Disallow: / User-agent: Turnitin Disallow: / User-agent: VelenPublicWebCrawler Disallow: / User-agent: GPTBot Disallow: / User-agent: DotBot Disallow: / User-agent: Owler Disallow: / User-agent: YisouSpider Disallow: / User-agent: ChatGLM-Spider Disallow: / User-agent: Barkrowler|netEstate Disallow: / User-agent: MojeekBot Disallow: / User-agent: serpstatbot Disallow: / Thanks Last edit: 1 month 2 weeks ago by [mohairbears](/forum/user/916-mohairbears "View mohairbears's Profile"). Please [Log in](/login?return=aHR0cHM6Ly93d3cuaGlrYXNob3AuY29tL2ZvcnVtLzM1LW9yZGVycy1tYW5hZ2VtZW50LzkxMDgyNy1jcmVhdGlvbi1vZi1mYWtlLWNhcnRzP3RtcGw9bWFya2Rvd24=) or [Create an account](/register) to join the conversation. - **[nicolas](/forum/user/63-nicolas "View nicolas's Profile")** - [![nicolas's Avatar](https://www.hikashop.com/media/kunena/avatars/resized/size144/users/avatar63.png?1793428657)](/forum/user/63-nicolas "View nicolas's Profile") - [ Away](/forum/user/63-nicolas) Less More - Posts: 86323 - Thank you received: 14283 - - 1 month 2 weeks ago [\#373427](#373427) by [nicolas](/forum/user/63-nicolas "View nicolas's Profile") Replied by *[nicolas](/forum/user/63-nicolas "View nicolas's Profile")* on topic *[Creation of Fake Carts](/forum/35-orders-management/910827-creation-of-fake-carts#373427 "-- HikaShop version -- : 6.6.0 -- Joomla version -- : 5.4.8 -- PHP version -- : 8.4 -- Error-message(debug-mod must be tuned on) -- : None Hi, I know this has been addressed a few times but, I now have 58,000 carts created since 2/9/26. The bots are creating them faster than they can be deleted! This is now getting ridiculous, there have to be a solution to this by now surely?? this is my current robots.txt file # If the Joomla site is installed within a folder # eg www.example.com/joomla/ then the robots.txt file # MUST be moved to the site root # eg www.example.com/robots.txt # AND the joomla folder name MUST be prefixed to all of the # paths. # eg the Disallow rule for the /administrator/ folder MUST # be changed to read # Disallow: /joomla/administrator/ # # For more information about the robots.txt standard, see: # www.robotstxt.org/orig.html # Allow all search engines to crawl all content Sitemap: www.xxxxx.com/index.php/component/osmap/...=xml&id=1&format=xml Allow: /google*.html User-agent: * Disallow: */add-1/cid* Allow: / User-agent: Amazonbot Disallow: / User-agent: RainBot Disallow: / User-agent: test-both Disallow: / User-agent: fidget-spinner-bot Disallow: / User-agent: thesis-research-bot Disallow: / User-agent: Pinterestbot Disallow: / User-agent: BLEXBot Disallow: / User-agent: DataForSeoBot Disallow: / User-agent: Mail.Ru Disallow: / User-agent: SemrushBot Disallow: / User-agent: Baiduspider Disallow: / User-agent: MJ12bot Disallow: / User-agent: Yandex Disallow: / User-agent: AwarioBot Disallow: / User-agent: ClaudeBot Disallow: / User-agent: Bytespider Disallow: / User-agent: GPTBot/1.0 Disallow: / User-agent: ClaudeBot Disallow: / User-agent: facebookexternalhit/1.1 Allow: / User-agent: Barkrowler Disallow: / User-agent: Turnitin Disallow: / User-agent: VelenPublicWebCrawler Disallow: / User-agent: GPTBot Disallow: / User-agent: DotBot Disallow: / User-agent: Owler Disallow: / User-agent: YisouSpider Disallow: / User-agent: ChatGLM-Spider Disallow: / User-agent: Barkrowler|netEstate Disallow: / User-agent: MojeekBot Disallow: / User-agent: serpstatbot Disallow: / Thanks")* Hello, Since version 6.6.0, which you are running, HikaShop removes the old carts by itself: the carts left untouched for longer than the "Cart retaining period" setting of the Advanced tab of your HikaShop configuration are deleted while a page of your backend is displayed, and also by the HikaShop cron, which drains them by batches of 200, up to 5000 carts per run. So please first check that the cron is actually running, on the Cron tab of the configuration. The retaining period is 30 days by default, which is why your carts created on the 2nd of September are still there. Lower it to one or two days and the cron will clear the 58,000 in a handful of runs. The wishlists of your customers are never removed by this, only the carts. On the other side, HikaShop already refuses to add a product to the cart when the request comes from a user agent it knows as a bot, and that list is long. The ones filling your database are therefore announcing themselves as a normal browser, which is also why your robots.txt does not stop them: it only asks nicely. Stopping that kind of traffic has to be done before it reaches PHP, with the firewall of your host, with a service like Cloudflare, or with a Joomla firewall extension. We are looking at whether HikaShop could avoid creating a cart at all for a request that carries no cookie, since a bot hitting an add to cart address directly has none, while a customer who browsed your shop before clicking always does. If that turns out to be safe, it would cut most of what you are seeing at the source. Please [Log in](/login?return=aHR0cHM6Ly93d3cuaGlrYXNob3AuY29tL2ZvcnVtLzM1LW9yZGVycy1tYW5hZ2VtZW50LzkxMDgyNy1jcmVhdGlvbi1vZi1mYWtlLWNhcnRzP3RtcGw9bWFya2Rvd24=) or [Create an account](/register) to join the conversation. - **[mohairbears](/forum/user/916-mohairbears "View mohairbears's Profile")** - [![mohairbears's Avatar](https://www.hikashop.com/media/kunena/core/svg/person.svg)](/forum/user/916-mohairbears "View mohairbears's Profile") Topic Author - [ Offline](/forum/user/916-mohairbears) Less More - Posts: 610 - Thank you received: 13 - 1 month 2 weeks ago [\#373434](#373434) by [mohairbears](/forum/user/916-mohairbears "View mohairbears's Profile") Replied by *[mohairbears](/forum/user/916-mohairbears "View mohairbears's Profile")* on topic *[Creation of Fake Carts](/forum/35-orders-management/910827-creation-of-fake-carts#373434 "-- HikaShop version -- : 6.6.0 -- Joomla version -- : 5.4.8 -- PHP version -- : 8.4 -- Error-message(debug-mod must be tuned on) -- : None Hi, I know this has been addressed a few times but, I now have 58,000 carts created since 2/9/26. The bots are creating them faster than they can be deleted! This is now getting ridiculous, there have to be a solution to this by now surely?? this is my current robots.txt file # If the Joomla site is installed within a folder # eg www.example.com/joomla/ then the robots.txt file # MUST be moved to the site root # eg www.example.com/robots.txt # AND the joomla folder name MUST be prefixed to all of the # paths. # eg the Disallow rule for the /administrator/ folder MUST # be changed to read # Disallow: /joomla/administrator/ # # For more information about the robots.txt standard, see: # www.robotstxt.org/orig.html # Allow all search engines to crawl all content Sitemap: www.xxxxx.com/index.php/component/osmap/...=xml&id=1&format=xml Allow: /google*.html User-agent: * Disallow: */add-1/cid* Allow: / User-agent: Amazonbot Disallow: / User-agent: RainBot Disallow: / User-agent: test-both Disallow: / User-agent: fidget-spinner-bot Disallow: / User-agent: thesis-research-bot Disallow: / User-agent: Pinterestbot Disallow: / User-agent: BLEXBot Disallow: / User-agent: DataForSeoBot Disallow: / User-agent: Mail.Ru Disallow: / User-agent: SemrushBot Disallow: / User-agent: Baiduspider Disallow: / User-agent: MJ12bot Disallow: / User-agent: Yandex Disallow: / User-agent: AwarioBot Disallow: / User-agent: ClaudeBot Disallow: / User-agent: Bytespider Disallow: / User-agent: GPTBot/1.0 Disallow: / User-agent: ClaudeBot Disallow: / User-agent: facebookexternalhit/1.1 Allow: / User-agent: Barkrowler Disallow: / User-agent: Turnitin Disallow: / User-agent: VelenPublicWebCrawler Disallow: / User-agent: GPTBot Disallow: / User-agent: DotBot Disallow: / User-agent: Owler Disallow: / User-agent: YisouSpider Disallow: / User-agent: ChatGLM-Spider Disallow: / User-agent: Barkrowler|netEstate Disallow: / User-agent: MojeekBot Disallow: / User-agent: serpstatbot Disallow: / Thanks")* Hiya, Yes the cron is running every 30 mins, but its only deleting a few carts per run? I cannot find anywhere to up the number? cart retention is set to 2 weeks. ****************************************************************************************************************************************************** ******************** 2026-09-17 06:37 ******************** HikaShop Triggered at 2026-09-17 06:37 ---- Details ---- Waitlist notifies checked (empty) 200 old carts have been removed. ****************************************************************************************************************************************************** ******************** 2026-09-17 07:36 ******************** HikaShop Triggered at 2026-09-17 07:36 ****************************************************************************************************************************************************** ******************** 2026-09-17 08:37 ******************** HikaShop Triggered at 2026-09-17 08:37 ---- Details ---- 96 old carts have been removed. ****************************************************************************************************************************************************** ******************** 2026-09-17 09:36 ******************** HikaShop Triggered at 2026-09-17 09:36 ---- Details ---- Waitlist notifies checked (empty) ****************************************************************************************************************************************************** ******************** 2026-09-17 10:36 ******************** HikaShop Triggered at 2026-09-17 10:36 Please [Log in](/login?return=aHR0cHM6Ly93d3cuaGlrYXNob3AuY29tL2ZvcnVtLzM1LW9yZGVycy1tYW5hZ2VtZW50LzkxMDgyNy1jcmVhdGlvbi1vZi1mYWtlLWNhcnRzP3RtcGw9bWFya2Rvd24=) or [Create an account](/register) to join the conversation. - **[nicolas](/forum/user/63-nicolas "View nicolas's Profile")** - [![nicolas's Avatar](https://www.hikashop.com/media/kunena/avatars/resized/size144/users/avatar63.png?1793428657)](/forum/user/63-nicolas "View nicolas's Profile") - [ Away](/forum/user/63-nicolas) Less More - Posts: 86323 - Thank you received: 14283 - - 1 month 2 weeks ago [\#373435](#373435) by [nicolas](/forum/user/63-nicolas "View nicolas's Profile") Replied by *[nicolas](/forum/user/63-nicolas "View nicolas's Profile")* on topic *[Creation of Fake Carts](/forum/35-orders-management/910827-creation-of-fake-carts#373435 "-- HikaShop version -- : 6.6.0 -- Joomla version -- : 5.4.8 -- PHP version -- : 8.4 -- Error-message(debug-mod must be tuned on) -- : None Hi, I know this has been addressed a few times but, I now have 58,000 carts created since 2/9/26. The bots are creating them faster than they can be deleted! This is now getting ridiculous, there have to be a solution to this by now surely?? this is my current robots.txt file # If the Joomla site is installed within a folder # eg www.example.com/joomla/ then the robots.txt file # MUST be moved to the site root # eg www.example.com/robots.txt # AND the joomla folder name MUST be prefixed to all of the # paths. # eg the Disallow rule for the /administrator/ folder MUST # be changed to read # Disallow: /joomla/administrator/ # # For more information about the robots.txt standard, see: # www.robotstxt.org/orig.html # Allow all search engines to crawl all content Sitemap: www.xxxxx.com/index.php/component/osmap/...=xml&id=1&format=xml Allow: /google*.html User-agent: * Disallow: */add-1/cid* Allow: / User-agent: Amazonbot Disallow: / User-agent: RainBot Disallow: / User-agent: test-both Disallow: / User-agent: fidget-spinner-bot Disallow: / User-agent: thesis-research-bot Disallow: / User-agent: Pinterestbot Disallow: / User-agent: BLEXBot Disallow: / User-agent: DataForSeoBot Disallow: / User-agent: Mail.Ru Disallow: / User-agent: SemrushBot Disallow: / User-agent: Baiduspider Disallow: / User-agent: MJ12bot Disallow: / User-agent: Yandex Disallow: / User-agent: AwarioBot Disallow: / User-agent: ClaudeBot Disallow: / User-agent: Bytespider Disallow: / User-agent: GPTBot/1.0 Disallow: / User-agent: ClaudeBot Disallow: / User-agent: facebookexternalhit/1.1 Allow: / User-agent: Barkrowler Disallow: / User-agent: Turnitin Disallow: / User-agent: VelenPublicWebCrawler Disallow: / User-agent: GPTBot Disallow: / User-agent: DotBot Disallow: / User-agent: Owler Disallow: / User-agent: YisouSpider Disallow: / User-agent: ChatGLM-Spider Disallow: / User-agent: Barkrowler|netEstate Disallow: / User-agent: MojeekBot Disallow: / User-agent: serpstatbot Disallow: / Thanks")* Hello, The number of carts removed per run is not what limits you: the cron removes them by batches of 200 and takes up to 25 batches in a row, so up to 5000 carts per run, and there is no setting to raise that because you are nowhere near it. What limits it is the retaining period itself, since only the carts left untouched for longer than it can be removed. With 2 weeks, the only carts your cron is allowed to touch today are the ones from the 2nd and the 3rd of September, and the other 58,000 are still too young for it. 58,000 carts since the 2nd of September is about 160 per hour, which is what you see leaving per hour: the cron is emptying them at the speed the robots created them two weeks ago. So set the "Cart retaining period" to one day and the whole backlog becomes removable at once, a handful of cron runs will then clear it. The only consequence is that a customer who leaves their cart for a day finds it empty when they come back, so you can set it back to a longer period once your database is clean. The following user(s) said Thank You: [mohairbears](/forum/user/916-mohairbears "View mohairbears's Profile") Please [Log in](/login?return=aHR0cHM6Ly93d3cuaGlrYXNob3AuY29tL2ZvcnVtLzM1LW9yZGVycy1tYW5hZ2VtZW50LzkxMDgyNy1jcmVhdGlvbi1vZi1mYWtlLWNhcnRzP3RtcGw9bWFya2Rvd24=) or [Create an account](/register) to join the conversation. Board Categories HikaShop Install & Update Product & Category Display Content Creation Sales and Orders Orders management Reports & Statistics Customers Checkout Payment Methods Shipping Methods Import & Export (CSV, XLS…) Specific Features Affilation Taxes Wishlist Vote Carousel & Slider Mass Actions Filters & Search Discount & Coupon Feature Request Integrations Showcase General Talk about HikaShop Development HikaShop 3.0 Beta Translation Commercial Jobs HikaShop Components HikaMarket Market: Feature requests Market: How to? Market: Bug Report HikaSerial General talk about HikaSerial Serial: Bug Report Serial: How to? Support en Français de HikaSerial (French Support) HikaSubscription HikaAuction Auction: Feature requests Auction: How to? Auction: Bug report Hikashop around the world Support en Français (French Support) Russian FAQ. Курс выживания с Hikashop. Частые вопросы и о Расширения Hikashop Наши сайты на Hikashop 日本語版サポート(Japanese Support) Thai German Archives Bug Report How to? [](/forum/topics/feed/mode-topics?format=feed&type=rss) Time to create page: 0.058 seconds [Powered by](/forum/credits) [Kunena Forum](https://www.kunena.org)