My current configuration is allowing customers to place orders without having to log-in on checkout, even though they currently have accounts in the system, with the same e-mail we have stored for them,. These orders they place without being logged in are therefore not viewable in their order history when they do log-in. Is there any way to require that they log-in if their e-mail address exists in the system, before ordering? I've been looking for a setting in the admin but to no avail. I am using oneStepCheckOutAn. An admin setting would be preferred over having to insert validation code into the system, but anything helps! Thanks!
-
How does this behavior differ from disabling guest checkout?– philwinkleAug 14, 2013 at 16:28
-
1He wants guest checkout but if the mail used for the order exists in the system they should be forced to log in. This is a security issue, because you are telling the attacker that the email exists. And no. This behavior is not included in the core.– Fabian BlechschmidtAug 14, 2013 at 16:37
-
@philwinkle: As Fabian mentioned, a guest should be able to checkout out without logging in, unless their e-mail address is already in our system. In which case the user should be forced to log-in.– JohnAug 14, 2013 at 16:45
-
1Doing this actually also has the potential to drop conversion rates because if the user doesn't know they have an account already, they probably don't know what the password is. If you prevent the order unless they login, there is a pretty good chance they'll just go find it somewhere else.– davidalgerAug 14, 2013 at 16:51
-
2If you ask me it is a better idea to send a link inside the order email and recommend to the user to add the order to his account. It should be quite easy, just send a link with a secret and order id and after login, add the customer_id to the order– Fabian BlechschmidtAug 14, 2013 at 19:03
1 Answer
This may not be the solution you planned on, but I feel it is the better user experience (feel free not to accept this as an answer).
Based on my previous comments I have just open-sourced a module that achieves a similar result (guest orders linked to customers). However, in my module it allows a customer to associate a previous guest order to their account. This gives the power to the customer - if they want an order associated they have the ability to do so at a later date.
Based on Fabian and David's comments it may be a nice feature of the module to include an association link during the order confirmation if the customer meant to place the order under the registered account. David's feedback about how the link would work makes perfect sense and my fears about abuse have been allayed.
I hope that this module would be of some use for you as it was created in response to this thread.
https://github.com/philwinkle/Philwinkle_LinkGuestOrder
Best of luck.