Customers add numbers to their first or last name...!?!

[cmodt]

Been having problems with customers adding numbers to their first or last name, like 'John201 Smith'. I have no idea why (have already asked the customers, but get no answer), and it is creating problems with the shipping company I use, as the order data is transferred directly.

 

Is it possible to remove the possibility of using numbers in the fields for first and last name in create_account, account_edit and address_book_process??

[Jack_mcs]

In create_account.php, find this line

$firstname = tep_db_prepare_input($HTTP_POST_VARS['firstname']);

and add this below it

$firstname = preg_replace( '/[\d]/', '', $firstname );

You'll need to do the same for $lastname. This will allow the account to be created but with the altered name. The customers may be doing that for some security reason on the credit card so it is probably better to add some code to let the customer know numbers aren't allowed and maybe prevent the account to be created if numbers are entered.

[Bob Terveuren]

Hi

 

Try adding a captcha to create_account.php - what you are seeing may be a (semi)- automated bot trying to create accounts with the view to running through test/genuine purchases on dodgy card numbers.

 

I've seen this on a couple of sites I've worked on based in Australia and each time it happened there would be a rash of accounts created with very similar looking details in the space of 5 - 10 minutes (the addresses used were usually UK for some reason) and each account would run through one payment on a single card number.

That was refused by eWay.

Immediately another account would be created and another card used.

[cmodt]

Jack_mcs - will try and add these changes. Will it work on account_edit and address_book_process also? Sorry, but I'm not a pro and only make changes that are necessary. Yes, it would be much better to add an error pop-up (I have this when they add text to the telephone number of postal code), but I have not been able to find any one with the same problem I have - and so no solution to the problem.

 

Bob Terveuren - the accounts are indeed real customers and all orders have been paid in full with valid debit card or moneytransfers.

[MrPhil]

I agree that there's something fishy going on here. Are you comfortable that these aren't stolen credit card numbers and bank accounts? If I got a member signup like that, I would go to the credit card company and ask them if they saw anything odd about that (I'm sure that the name doesn't match what's on the credit card). If they bless it (in writing), you've covered yourself about as best you can, and can go ahead and ship.

[Jack_mcs]

Jack_mcs - will try and add these changes. Will it work on account_edit and address_book_process also?

The basic code would work but you would have to find the lines where the name are taken and adjust the code so it changes that name.

[cmodt]

MrPhil - the customers are 100% genuine and no stolen cards have been used. Some have also paid with moneytransfer. So I have received payment for all orders. I do not send any orders before payment has been received.

 

 

Jack_mcs - I will try and figure it out. Haven't had the time before now, so I hope the code works...

[cmodt]

Thanks. The code works great on all 3 pages, although an error pop-up would have been great, but you can't always get what you want.