Backspacing the Checkout URL Exposes Free Membership Form

If you backspace the checkout URL, it exposes the free membership form. For example, []/checkout/?rid=pucjyG backspaced to []/checkout will expose a free form that users can use to bypass the paid membership and register for my site, How is this prevented?
Answer Hi Gary

Actually, the checkout page without any ?rid in the URL does not have to expose a free membership level. It just defaults to product/membership level that you set as your default.

You can always change that to a paid membership level if you like.

And also remember that a free membership does not give any access to content unless you specifically protect content access to the free membership level


Login or Signup to post a comment