Spam registration help

  • Jason

    (@jestermgee)


    1 year, 5 months ago

    So I have a woo commerce digital website and I have only deployed last week but have issues with spam registrations, let me explain.

    So I know that I can disable “any user can register” and have people just create an account after checkout which would be great, however when I deselect this option I have found that if people trigger a password reset using a custom reset page I created based on Elementor and “Essential Addons” to create the password reset page, when a user initiates a reset and clicks the emailed link they are returned to my password reset page where the fields are missing, just a blank box.

    If I enable “anyone can register” then users can reset passwords correctly so it seems I cannot disable this option.

    I have completely removed the registration page I created (or removed the form) and also created 301 redirects for the default WP registration link to not allow registrations but I am still getting 1 spam account every 5 minutes register. I also have email verification setup and delete unverified accounts every few hours so this is not the issue, it is the constant registrations and emails I receive.

    I ahve captcha and that is not helping at all. I have no clue how accounts are registering as I have kind of disabled everything. I’d love to just disable registrations and only rely on accounts being created when checking out but the password reset issue is the main problem here.

    I am kind of lost now and not sure what to do to save my deteriorating sanity.

Viewing 2 replies - 1 through 2 (of 2 total)
  • mayuripatel

    (@mayuripatel)

    1 year, 5 months ago

    Hello @jestermgee

    Ensure you’re using Google reCAPTCHA v3 on your registration, login, and password reset forms.

    You could try a plugin like Theme My Login or Password Reset for WooCommerce, which handles password resets without relying on Elementor or custom-built pages.

    Use a plugin like Peter’s Login Redirect to set up a redirect after the password reset link is clicked.

    Disable the default registration form using WooCommerce settings.
    Force login/registration at checkout: make sure it’s fully activated.

    Moderator threadi

    (@threadi)

    1 year, 5 months ago

    I recommend getting in touch with WooCommerce’s support about this via https://woocommerce.com/my-account/create-a-ticket/ if you have any of their paid WooCommerce products or https://ww.wp.xz.cn/support/plugin/woocommerce/ if you do not.

Viewing 2 replies - 1 through 2 (of 2 total)

The topic ‘Spam registration help’ is closed to new replies.