How To Stop Fake Accounts......

mtechama · January 18, 2007

I just got a fake customer using fake name, street addres, phone, and email, how can stop this? is there a contribution that when some register and have to send them a acctivation code to activate the account. and if they don't acctivate the account within lets say 5 minutes there account will automaticly deleted out of my store?

Wade

♥toyicebear · January 18, 2007

I just got a fake customer using fake name, street addres, phone, and email, how can stop this? is there a contribution that when some register and have to send them a acctivation code to activate the account. and if they don't acctivate the account within lets say 5 minutes there account will automaticly deleted out of my store?

Wade

e-mail validation

mtechama · January 18, 2007

e-mail validation

this contribution will not work because when they register there account is already active before they recieve the activation code. I don't wont that.

♥toyicebear · January 18, 2007

this contribution will not work because when they register there account is already active before they recieve the activation code. I don't wont that.

It can be used like this....

Someone signs up for an account at your shop, an email is sent with and activation code/activation link.

Unless they use this code/link, they will not be able to order nor log in to the site.

This means they atleast have to use a valid email address when signing up so that they can recive the activation code/link.

You can also extend the contribution by setting up a account cleaning cron job which deletes unactivated accounts evry 24 hours or so.

mtechama · January 18, 2007

It can be used like this....

Someone signs up for an account at your shop, an email is sent with and activation code/activation link.

Unless they use this code/link, they will not be able to order nor log in to the site.

This means they atleast have to use a valid email address when signing up so that they can recive the activation code/link.

You can also extend the contribution by setting up a account cleaning cron job which deletes unactivated accounts evry 24 hours or so.

Well it doesn't work that way.....

mtechama · January 18, 2007

ok what its doing is this when I do a test to create an account:

after account is created it shows that I am already logged in before I even got the email validation.

if someone creates an accound with a bogous (fake) email they can still log in.

January 18, 2007

Did somebody try to make a fraudulent purchase through the fake account? If not, I would not worry about it. Maybe somebody just wanted to get through to the payment screen to see thier payment options before they really sign up. There are a handfull of reasons.

It also could be a bot (program) that signs up for accounts for whatever reason (possibly looking for known vulnerabilities). If it is a bot you can stop it by adding a field in which the customer has to type in a number from an image that a program can't read.

Either way, making your customer "verify" thier account with email could be a huge deterrent. While email is sent quickly in most cases, I have seen delays up to 20 minutes from some servers when the mail que gets backed up. It is also a pain for legitimate clients to have to do that in the first place. I think you will probably loose sales if you impliment something like that.

If there was a fraudulent purchase placed, call the police. Unless they used a proxy or public internet connection you can track them down.

♥toyicebear · January 19, 2007

ok what its doing is this when I do a test to create an account:

after account is created it shows that I am already logged in before I even got the email validation.

if someone creates an accound with a bogous (fake) email they can still log in.

It is supposed to log you off again automatically after the sign up , check the install instructions again.

You can also mod it yourself to do the logoff after sign up.

customers can not log in again untill the email has been validated.

mtechama · January 19, 2007

It is supposed to log you off again automatically after the sign up , check the install instructions again.

You can also mod it yourself to do the logoff after sign up.

customers can not log in again untill the email has been validated.

Well I got it working but now I get an error like this:

Warning: in_array(): Wrong datatype for second argument in /home/content/m/o/r/morristech/html/includes/boxes/categories.php on line 53