Product Description
A lightweight, production-ready WordPress plugin that protects your WooCommerce store from automated bot registrations, spam accounts, and fake user signups—without slowing down your site.
Why SecureRegister?
Bot registrations and fake accounts are a growing problem for WooCommerce stores. They clutter your database, skew analytics, waste resources, and can expose your store to fraud. PatSaTECH SecureRegister gives you enterprise-grade protection in a simple, easy-to-use package—no complex setup, no heavy dependencies, no performance hit.
Key Features
- Honeypot Protection – Hidden field invisible to real users. Bots that fill it are blocked silently—no captchas, no friction for customers.
- Rate Limiting – Limit registrations per IP (default: 3 per hour). Stops mass signup attacks using transients—no database bloat.
- Disposable Email Blocking – Blocks mailinator.com, 10minutemail.com, guerrillamail.com, tempmail.com. Add more domains via filter.
- MX Record Validation – Verifies email domains have valid mail servers. Rejects fake domains. Results cached 12 hours for performance.
- Nonce Validation – Validates WooCommerce registration nonce to prevent CSRF attacks
- Block Log – Detailed log of blocked attempts (IP, email, username, block type) for monitoring
- Statistics Dashboard – See total attacks blocked and breakdown by type (honeypot, rate limit, disposable email, invalid MX)
- Export / Import Settings – Backup or migrate your configuration to another site in one click
- Optional: Disable New Account Email – Useful for custom activation flows
- Shop Manager Access – Both Administrators and Shop managers can manage the plugin
- HPOS Compatible – Fully compatible with WooCommerce High-Performance Order Storage
- Developer-friendly – Filters and hooks to add disposable domains, customize IP headers (Cloudflare), and log fraud attempts
What You Get
- Clean, intuitive admin interface under PatSaTECH Tools → Secure Register
- Three tabs: Block Log, Statistics, Settings—everything in one place
- Configurable log size (50–1000 entries), clear log, reset statistics
- Lightweight code—WordPress Options API and transients only, no heavy dependencies
- No core WordPress or WooCommerce files modified—safe updates
- Input sanitized, output escaped—follows WordPress coding standards
Requirements
- WordPress 5.8+
- PHP 7.4+
- WooCommerce 6.0+ (tested up to 8.5)
- HPOS (High-Performance Order Storage) compatible
Protect your WooCommerce store today. Reduce spam, improve data quality, and keep your customer base real.
Frequently Asked Questions
What is honeypot protection?
A honeypot is a hidden form field that real users never see. Bots typically auto-fill every field they find. If the honeypot field is filled, SecureRegister blocks the registration silently—no captcha, no extra steps for legitimate customers.
Will this slow down my site?
No. SecureRegister is lightweight and uses WordPress transients for rate limiting (no extra database tables). MX validation results are cached for 12 hours. The plugin only runs during registration, not on every page load.
Does it work with Cloudflare or other proxies?
Yes. Developers can use the provided filter to customize which HTTP header is used for the client IP (e.g., CF-Connecting-IP for Cloudflare), so rate limiting works correctly behind proxies.
Can I add more disposable email domains?
Yes. Use the built-in filter hook to add or remove disposable email domains. No code editing of the plugin is required.
Does it work with WooCommerce HPOS?
Yes. SecureRegister is fully compatible with WooCommerce High-Performance Order Storage (HPOS).
Will real customers be blocked by mistake?
The honeypot is invisible to humans, so legitimate users won't fill it. Rate limits are configurable (default: 3 per hour per IP). MX validation only blocks domains with no valid mail servers. You can adjust or disable any protection in Settings.
Where do I manage the plugin?
Go to PatSaTECH Tools → Secure Register in your WordPress admin. You'll find Block Log, Statistics, and Settings in one place.
