hacked review on site

[hoknight]

Hi,

I have received over hundred emails notification from our shop.Cause by a spam account was created on site.
Now I just disabled the spam account, review function and changed the New User Account Activation by Admin is must( before is None).

And then the review emails notification was stopped.

Our system version:
Joomla 2.5.19
VM: 2.0.26d
PHP 5.2.17

So, we will upgrade the PHP version up to 5.3.10 after this holiday.Any other we should do on this issues?

Thanks.

[attachment cleanup by admin]

[jenkinhill]

Once PHP is update to at least 5.3.10 (and preferably to at least 5.4) the update VM to 2.6 which has recaptcha available for registration and ask a question/recommened to a friend.
http://virtuemart.net/news/latest-news/456-virtuemart-are-proud-to-release-vm2-6