EDD Auto Register

Just wanted to stop by and say thank you for the recent updates! I've been using this plugin for almost 2 years, and was happy that it always just worked. But, since it was never updated I was always waiting for it to crash after an update of WordPress. It didn't, fortunately. :-) Happy to see that you guys are giving it some love again :-)

This is an excellent extension to add to Easy Digital Downloads. It eliminates confusion and friction for users when they purchase something on your site because it automatically creates an account for them and logs them in. It's especially useful when selling online courses or memberships on your site. I use it specifically for LearnDash and it works great. Because it creates the account & logs the user in immediately after a purchase, they can begin consuming your content or taking your course right away.

Security is sadly a topic that the EDD people to not care about. Sending clear text passwords out to people should not be done. I have fixed this with this code. This hides the field be then tells the users after the did the purchase that they should create a password. Not very user friendly, I currently had disabled it but I am thinking of activating it again because I think my sales gone down because if this.

<?php
namespace nextgenthemeswebsite;

add_filter( 'edd_auto_register_email_body', __NAMESPACE__ . '\edd_auto_register_email_body', 10, 4 );

function edd_auto_register_email_body( $default_email_body, $first_name, $username, $password ) {

	// Email body
	$out = __( "Dear", "edd-auto-register" ) . ' ' . $first_name . ",nn";
	$out .= sprintf(
		__( "Thanks for your purchase! A account with a random password has been created for you. Please <a href='%s'>follow the lost password procedure</a> to create a secure password for your account in case you want to ask a support question or access your downloads. (For security reasons passwords are not send out in cleartext)", "nextgenthemes-website" ),
		wp_lostpassword_url()
	) . "nn";
	$out .= __( "Your Username:", "edd-auto-register" ) . ' ' . $username . "nn";

	return $out;
}

Also using emails and usernames isn't exactly great either as you can guess them form the author slugs WP generates from them. My Idea would be so simply use javascript on checkout to fill in a random generate password on checkout automatically. WP already has a function for this. And do not display the 2nd password confirm field at all, and maybe even autofill the username field with something based on the first/last name they enter. To elaborate on my point that this is not the first time I notice this pattern from EDD: They had ssl_verify => false all over their code, I think its now changed it now changed some areas, or at least the is a option to verify your shops ssl. But with the software licensing extension those API calls and downloads are (or at lease were) totally unresponsively ignoring SSL altogether. Because some WP bug that was fixed like 10 years ago. Their entire attitude to simply ignore it because it may fail in some very rare cases is very bad. It could lead to a chain reaction from a MITM attack on easydigitaldownloads.com that all extensions they ship to customers would ship from hackers sites instead with malicious code and given that many of their customers use EDD SL as well they could spread it from there. Because all the API calls simple ignor(ed) SSL! Not a security expert but at least I pay a little bit attention. Also, and my guess is that this is very common in this industry. They do support via email and they expect you to send them passwords to your sites in cleartext! Great Idea, bad execution.

This plugin works, I have a suggestion though. In the EDD settings > Misc > Checkout Settings > Show Register / Login Form? You should remove the first two options in the Select field since they no longer apply. I got stuck on this setting for 30 second, no biggy but would make setup smoother.

Keep your checkout fields minimal to improve conversions while still getting your customer accounts established. Definitely a key add-on for my EDD sites. Can't do without it now.

I wish there was an option to enable the introduction of the password directly from the form

It works like a charm.