CiviCRM Community Forums (archive)

I am using CiviCRM 2.06. I know I should upgrade to the latest version but there are still a few drupal 5 modules that our site needs. As soon as I can work around those I'll upgrade to drupal 6 and upgrade CiviCRM. In the meantime we are having a huge problem with our contribution pages. Someone is using them and our payment processor (Authorize) to run credit cards. They use the same name but different card numbers and run it 20 times in an hour. Through authorize I've set their payment processor to limit the number of transactions from an IP address to 1 an hour. I've also tracked the IP addresses they use and have denied them through .htaccess. That worked for awhile but now they are jumping around IP addresses.

I've been able to get the captcha to work on the standalone profile but when that profile is included on the contribution page the captcha does not show up. What can I do to stop this credit card scammer? We get a few calls a week from angry people saying someone has tried to charge their card in our name (in the amounts of 5-10k).

Please help!