Accounts created before payment is made?

[randy@kcwebhosting.com]

I have a dedicated server with whm. As a client, I created a test account which went fine in whmcs, however the account wasn't automatically created in whm. I updated the access hash and now when a client add a new hosting package it does the following:

 

step 1) client creates an order and goes through the steps but stops at the screen where it asks for the credit card (I'm using authorize.net)

 

step 2) WHM creates the account and I get an email notification of the new account details

 

step 3) Customer pays via credit card (authorize.net)

 

The problem is that WHM should NOT create the account from step 2 above until payment is made (step 3), but it doesn't happen in that order??? Unless I'm missing something, this is a huge hole that could allow my customers to create accounts without paying? Of course I get email notification of all new accounts, but constantly telling the customers to pay for them isn't very ideal. I also understand that the account is in a "pending" state within whmcs, however they could still login via ftp (since whm already created the account) to upload malicious spamware garbage and then promote it using the temporary IP based browser url...

Am I doing something wrong?

Thanks!

-Randy

[uberhost]

For each product or service you have a choice as to how to automatically create the account as follows:

 

Server Settings

• Automatically create the account as soon as an order is placed
  
• Automatically create the account as soon as the first payment is received
  
• Automatically create the account when you manually accept a pending order
  
• Do not automatically setup this account
  

IMO, the safest of the automatic settings is to create the account after you accept the order.

[randy@kcwebhosting.com]

Perfect. I figured I was overlooking something.

Thanks!

-Randy

[mm1250]

You want to select the option that says Setup account after first payment is made. This way it will keep the account on pending until the payment is made. If your going to use this feature. I suggest you have Maxmind setup since there are allot of scammers who look for auto-setup hosts.

[chickendippers]

We use Varilogix Fraudcall and you can tell it's effective because scammers don't even bother clicking the "Call Now" button.