Community Support Forums

Hello,

I am setting up a website which will require users to sign up to a subscription in order to post content. Like a classifieds board.

I've got it all working fine with s2Member/PayPal however im quite worried that anyone can access the registration page if they know the standard wordpress registration url. (The one that is masked with tinyurl in the confirmation email).

Is there anyway of checking upon login that the user has the wp_s2member_subscr_id column populated with a payment ID, so unless they have a valid payment ID and definatley signed up with a subscription they won't be allowed in?

Thanks

Hi,

This post might be interesting to you:
http://www.primothemes.com/forums/viewtopic.php?f=4&t=481&start=0&hilit=protecting+registration

Hi there. Thanks for your inquiry.

By default, Open Registration is turned OFF. So the only way a public visitor could register on your site is with paid access. Upon returning from PayPal, s2Member will send your Customer a link where they are granted access to the registration form, and given the ability to register ONE Username.
There is further discussion here. And video tutorials are available here:
http://www.s2member.com/videos/

That being said, I understand your concern over this matter. If you are integrating s2Member into a custom theme or another plugin, and you just want to make double-sure that a Customer paid, you can do something like this:

Code: Select all

if(current_user_can("access_s2member_level1") && get_user_option("s2member_subscr_id")){
// yep, they're a paid Customer!
}