Jump to content

fake account creation


madpato

Recommended Posts

Hello

 

I have whmcs 5.2.10 and in the past 2 days i got new accounts being created (probably a script or similar)

Thing is that this ALSO creates a cpanel account with a subdomain of my domain.

 

I asked to support a way to put a captcha on my cart but they said that option is not available since captcha is only for domainchecker.php, register.php and submitticket.php. I am using ajaxcart and i see no captcha on the registration part at least.

 

I had to put Maintenance Mode to stop this from happening. Currently i dont know of a way to stop this.

 

Any ideas are very appreciated. Thanks.

Link to comment
Share on other sites

Hello,

 

It sounds like a configuration issue. Do you have the cPanel module setup to create the account as soon as the order is placed, or when the payment is received? Also, do you have "offline" payment methods enabled?

 

Yes i have it as soon as the order is placed. And i do have an offline payment method. I know this is not the best aproach but it has been working for quite some time, we have customer who cant make online payments so this is a must.

Everything could be solved with a captcha i believe.

 

Thanks

Link to comment
Share on other sites

Hello,

 

While the captcha cannot be implemented on pages other than the designated (at least not by WHMCS interface management), I would recommend to not allow creation of accounts unless payment is received. This allows you to accept orders from clients that are requiring offline payment methods.

 

The current configuration, would have allowed anyone to create an account without payment regardless of the version.

Link to comment
Share on other sites

Hello,

 

While the captcha cannot be implemented on pages other than the designated (at least not by WHMCS interface management), I would recommend to not allow creation of accounts unless payment is received. This allows you to accept orders from clients that are requiring offline payment methods.

 

The current configuration, would have allowed anyone to create an account without payment regardless of the version.

 

Hello

 

I agree on that one i will change to that, still how am i going to prevent the user account creation on whmcs?

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...

Important Information

By using this site, you agree to our Terms of Use & Guidelines and understand your posts will initially be pre-moderated