User is logged into account before domain is paid for

[squarecandy]

Hello -

 

I'm getting malicious users on my WHMCS installation that are signing up for accounts and able to login by starting the domain purchase process, but just not completing the credit card payment.

 

I want to continue to offer domains for sale, but I don't want users to be able to create and access a new account until they have paid for something (usually a good sign that they are a legitimate entity).

 

Any advice on how to do this?

 

Thanks,

 

Peter

[CCSupport]

If you go to General Settings, then the 'Other' tab... You'll see a tick box that says "Allow Client Registration".... Just untick it. They will have to complete an order before logging in I believe.... I might be wrong though! We've had no issues since removing that option.

[WHMCS John]

Hi,

The client account is created as soon as the order is placed, this way you have captured the client's details to follow-up should they abandon at the payment stage and close the sale.