Validating accounts?

[Guest]

Im having a prob with some (one in particular) people placing fake orders - so this is a two pronged question.

 

1/ anyone have any good tips for vaildating accounts? eg make sure the supply a real e-mail acc?

 

2/ Can you reset the 'bestsellers' box. Mine is all screwed up thanks to this little bugger ordering about 30 million of one of my products!

 

Cheers in advance!

 

G.

 

www.uk-survival.co.uk

[peterr]

Hi Graeme,

 

Im having a prob with some (one in particular) people placing fake orders - so this is a two pronged question.

 

I can sympathise with you, the only (online) orders we have so far are all fake. :D

 

1/ anyone have any good tips for vaildating accounts? eg make sure the supply a real e-mail acc?

 

The function called tep_validate_email() is in /catalog/includes/functions/validations.php , and does just that, but looking at the file called tld.txt.

 

From the PHPXREF product, the function is referenced as follows:

 

Referenced 10 times:

 

    * /account_edit.php -> line 68

    * /contact_us.php -> line 23

    * /create_account.php -> line 91

    * /tell_a_friend.php -> line 51

    * /tell_a_friend.php -> line 63

    * /includes/modules/payment/cc.php -> line 158

    * /includes/modules/payment/cc.php -> line 169

    * /includes/functions/validations.php -> line 43

    * /admin/customers.php -> line 75

    * /admin/includes/functions/validations.php -> line 43

 

Looking through a few of those files, it apears that the tep_validate_email() function is used in most cases, it doesn't seem to be conditional, and the 'admin' section, email option only state an option to 'validate emails through a DNS server', as distinct from simply 'validating the email address.

 

Therefore, have a look at /catalog/includes/tld.txt

 

2/ Can you reset the 'bestsellers' box. Mine is all screwed up thanks to this little bugger ordering about 30 million of one of my products!

 

At a guess, the bestsellers only draws it's information from the table called 'orders', so is there an easy way for you to delete the orders that are not 'real' ? Do you have MyPHPAdmin or similar ?

 

Peter

[nrlatsha]

0.02

 

Contrib called signup confirm email - sends the password to the email address they signed up with. They have to get that mail to log on. Of course not fool proof with the free email accounts out there, but 1 more step to go through...