Mystery: How Are People Registering an Account without Making a Purchase

  • springdale

    (@springdale)


    5 years ago

    I run a site using Easy Digital Downloads for purchasing a LearnDash online course. The site is virginiabarexamtutor.com

    I want to prevent anyone from registering and getting a user account without purchasing through EDD. In other words, I don’t want any user accounts from anyone who has not purchased. I have EDD setup to automatically create a wordpress user account for everyone who purchases, and my goal is that this be the ONLY way anyone can create a wordpress user account.

    With that goal in mind, my login page does not have a link to create a new user. And I redirect /wp-login.php?action=register to my purchase page rather than to the new user registration page.

    YET, despite this, I still occasionally have someone manage to register as a new wordpress user, without purchasing a course through EDD. I cannot figure out how these users are doing this. Any ideas on how this might be happening? Feel free to go to my site and give it a shot.

    The page I need help with: [log in to see the link]

Viewing 9 replies - 1 through 9 (of 9 total)
  • Thread Starter springdale

    (@springdale)

    So the admins moved this thread from the general wordpress topic to the EDD topic, which I think was wrong of them. If anything, this is a general wordpress issue not specific to EDD. Nevertheless, here we are. I recognize what I’m attempting is not a feature specific to EDD. I’m merely trying to figure out how anyone is bypassing my 201 redirects and managing to create wordpress user accounts, when the only other way to do that (I thought) is by making a purchase (where EDD will automatically create the user account).

    Pratik Jain

    (@pratik-jain)

    Hi @springdale

    Thanks for the details.

    Can you please confirm that the invalid registered account (Account without any purchase) have any pending record in EDD payment history?

    Thread Starter springdale

    (@springdale)

    Thanks for your reply! Yes, that is correct. In reviewing the Payment History screen from EDD, there are no associated transactions — including no transactions that were pending, processed, refunded, revoked, failed, abandoned, preapproved, or any other status. I also checked with the logs of my payment processor, and that showed the same. No record of any attempted transaction at all.

    Pratik Jain

    (@pratik-jain)

    Hi @springdale

    Its very strange.

    What is the user role for invalid accounts? Does it “EDD Subscriber”..?

    You can check this from WordPress admin User screen.

    Thread Starter springdale

    (@springdale)

    No the user role for all new accounts on my site is just “Subscriber”. That was the role for this invalid account, and it is also the role assigned to everyone who purchases and gets an account the correct way.

    Pratik Jain

    (@pratik-jain)

    Hi @springdale

    It is very curious.

    Did you find any new user today named “Pratik”? I have tried testing on your site and try to purchase.

    Any pending transaction or anything else?

    Thread Starter springdale

    (@springdale)

    No. I just checked and do not have a user account with the name Pratik and there is no record of any transaction.

    Pratik Jain

    (@pratik-jain)

    Hi @springdale

    OK.. Thanks for your response. Now I am also curious that how the user is going to register on your website without purchase.

    In recent, any new unauthorized user is registered on your site or not?

    Thread Starter springdale

    (@springdale)

    No there haven’t been any new registrations without a purchase. It only happens rarely, maybe a few times per year. It’s not a big problem, just an annoyance. I appreciate you trying to figure it out. I really don’t know what else to try.

Viewing 9 replies - 1 through 9 (of 9 total)
  • The topic ‘Mystery: How Are People Registering an Account without Making a Purchase’ is closed to new replies.