durangod Posted May 3, 2013 Share Posted May 3, 2013 (edited) Hi, I got my first fraud today, i dont know why it was labeled fraud but the ordered service is labeled as fraud in the client info area. But they did complete the order without a payment and they did get an invoice as well as the welcome letter and order confirmation. How do i stop the order confirmation, invoice, and welcome letter unless they have actually made a valid payment? As it is now anyone can just register and create invoices and welcome letters and confirmations willy nilly, that does not seem right. the confirmations and stuff were mailed before the fraud check on my logs.. Order ID xx Failed Fraud Check - 03/05/2013 04:18 - Client - Order ID xx Fraud Check Initiated - 03/05/2013 04:18 - System - Email Sent to xxxxxx (Order Confirmation) - 03/05/2013 04:18 - System - Email Sent to xxxxxx(Customer Invoice) - 03/05/2013 04:18 - System - Created Invoice - Invoice ID: xx - 03/05/2013 04:18 - System - New Order Placed - Edited May 3, 2013 by durangod 0 Quote Link to comment Share on other sites More sharing options...
durangod Posted May 3, 2013 Author Share Posted May 3, 2013 Sorry if i posted that in the wrong place I really would prefer that on a fraud order that none of the order letters go out, maybe just an email that says to contact us. It sets a bad presedence to send them confirmation and welcome letters and then tell them their order is cancelled after the fact. 0 Quote Link to comment Share on other sites More sharing options...
durangod Posted May 4, 2013 Author Share Posted May 4, 2013 (edited) Ok today i just got another one from the same country, another fraud customer and order. There has to be a way to put up some kind of wall to stop anyone from just creating an order willy nilly if it is captured as fraud. I will do some noodling over this.. Seems to me that its a big hole that needs to be filled. they used the same ip so i will deny that sever side for now until i come up with something. Here is the host info from the fraud tickets Host: 81.202.81.165.dyn.user.ono.com I tried to contact them but there is no report link and its in spanish so i cant navagate even with a translater. Edited May 5, 2013 by durangod 0 Quote Link to comment Share on other sites More sharing options...
vec Posted May 5, 2013 Share Posted May 5, 2013 Do you have the product setup to auto or wait for first payment? 0 Quote Link to comment Share on other sites More sharing options...
durangod Posted May 5, 2013 Author Share Posted May 5, 2013 I have it set to wait for first payment. Thats why i as so surprised... 0 Quote Link to comment Share on other sites More sharing options...
durangod Posted May 5, 2013 Author Share Posted May 5, 2013 I did some looking around and i did find an "if is paid" clause in the complete tpl but i have found nothing so far regarding a routine in the tpl files that either includes or sends to an email process. If i can find where it starts the email process of the comfirmation and invoice emails i can do something to trap it, but i have to find it first. Hopefully it will be in the tpl and not the core, if its in the core of course im screwed lol... 0 Quote Link to comment Share on other sites More sharing options...
bear Posted May 5, 2013 Share Posted May 5, 2013 When someone orders, an account is created so it sends the welcome email (that info is used in part for fraud checking). Since they ordered and need to pay, an invoice is created, which also sends an email. It's during the process of payment that the fraud check kicks in, and if it finds fraud, stops the order and marks it accordingly. It wouldn't be possible to check for fraud *before* attempting payment, IMO. 0 Quote Link to comment Share on other sites More sharing options...
durangod Posted May 6, 2013 Author Share Posted May 6, 2013 Thanks bear... I am certainly willing to compromise and live with some things. The welcome i understand thats not so bad, if they want to register and thats all they do then that is just fine. No going to get too worked up about that one. And the same with the invoice, if they want to order and not pay right then, that is not how i like it but i can live with it, thats not such a huge issue. However, the main deal is the confirmation email basically confirming their service, that is the real issue. It confirms their service when in fact they have no service if it is stopped as fraud, as a matter of fact the order on fraud status is actually cancelled, and i will bet that the client does not get an email stating such. So they get a confirmation email and no email saying otherwise when its fraud, which means i have to send them an email manually. When in fact if the confirmation email process was moved until after the payment is complete and no fraud then that would fix that issue and not send a false statement to the client. 0 Quote Link to comment Share on other sites More sharing options...
bear Posted May 6, 2013 Share Posted May 6, 2013 However, the main deal is the confirmation email basically confirming their service, that is the real issue. It confirms their service when in fact they have no service if it is stopped as fraud Hmm, the docs state this: "Welcome Email - The email template to send when the product is activated." That means (as I understand it) after the order is accepted/provisioned, not for pending orders. Yours sends on placing the order? 0 Quote Link to comment Share on other sites More sharing options...
durangod Posted May 6, 2013 Author Share Posted May 6, 2013 Yes, the welcome email simply welcomes them to the hosting company as a client, pretty much it just means they have an account regardless of the status. So regardless if they place an order they get a welcome email as i understand it. That is how it was when i did some testing awhile back, i just registered and got a welcome email, but nothing else. Which is correct. I read the docs as well but i know whmcs has alot of work to do on the docs as with all the updates im sure they are not all up to date, as a matter of fact im almost positive. So i would not put so much faith in the docs but rather how it actually works at our end. 0 Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.