PD Shield for Blesta

PD Shield stops fake signups and fraudulent orders before Blesta provisions anything. Disposable email addresses are refused at signup, too many orders from one IP are held, repeat offenders can be stopped from placing new orders, and per-client purchase limits keep one customer from holding more than you allow. Anything suspicious is held for your review, so you can approve a genuine order and keep the sale. PD Shield Pro adds a transparent 0 to 100 risk score on every order, proxy, VPN and Tor detection, a review queue and reporting.

It is built for hosts who sell instantly provisioned packages such as hosting, VPS and licences, and who are tired of cleaning up after bots, throwaway accounts and cancel-and-reorder trial abuse.

Why hosts choose PD Shield

Stop the fake before it provisions. Checks run when the signup or order is placed, before Blesta sets anything up, so a bad order does not cost you a server or a licence.

Hold, do not lose, the sale. A suspicious order is held for review rather than lost. Once you approve it, the customer pays and it provisions.

You can always see why. Every held order has its reason spelled out, and the Pro score lists each contributing signal beside the outcome.

It cannot break your checkout. A fault inside PD Shield never breaks a customer's checkout or registration, and genuine customers see nothing of it: it adds no client-area pages.

Works beside the tools you already use. PD Shield complements Blesta's own fraud tools and leaves their settings alone.

Honest about Blesta. Blesta's order flow cannot refuse an order at checkout the way some rules would like, so on Blesta the over-limit and blocked cases are placed and held for your review instead of being refused. The docs say so, and so does this page.

How it works

1. Install PD Shield from PD Modules. The free gates start with sensible defaults.
2. Choose what happens to a risky order. The default action is hold.
3. Add the rules you want. Turn on Order Guard, purchase limits, free-email blocking or email-verification holds.
4. Review and release. Held orders wait for your decision before anything is set up. Approve the genuine ones; reject the rest.

What you get in Blesta

Free front-door gates

• Disposable email blocking: on by default. A signup with a throwaway address is refused before the account exists. A built-in list covers the most common throwaway domains and the placeholder domains example.com and test.com
• Free-email blocking: off by default. When on, a signup with free webmail such as gmail or outlook is refused
• Velocity limit: on by default at 5 orders and signups per IP per 60 minutes. On Blesta it follows every action setting: block, hold (default) or flag. Customers with a paid invoice and a live service are not caught; new signups still are. Forwarded IP headers are trusted only from Cloudflare or ranges you list, so a forged header cannot walk past it
• Email-verification hold: off by default. When on, an order from a customer whose email address is not verified is held for review, then released automatically when they verify. It does nothing if verification is off in Blesta itself
• Alerts: you are emailed whenever an order is held. Leave the address blank and every active admin is told
• A honeypot field is not available on Blesta yet; no hidden field is added to Blesta's order or signup forms

Order Guard and purchase limits

• Find a client by name, company or email and block new orders in one click; unblock any time. On Blesta a blocked client's new order is placed and held for review. Their existing services and renewals are never affected, and the reason is internal and never shown
• Purchase limits cap a specific product, a whole product group or all services per client, enforced automatically at checkout. On Blesta every over-limit order is held for review, and only an order that actually breaches a rule is held
• Exempt client groups, chosen with a searchable picker, bypass every limit
• Both are off by default, and their tabs say rules are not enforced until you turn them on

What the customer is told

• A held order sends the customer one short email saying it is being checked, quoting their order number, saying nothing has been charged and that they will hear as soon as the check is done. It never names the check. You can edit and translate it under Settings > Company > Emails

Pro: score, detect, review

• Fraud Risk Scoring: every order gets a 0 to 100 score from weighted signals with each factor shown. At or above the review score (default 40) it is held. At or above the block score (default 70) it is also held for review, since Blesta cannot refuse it at checkout
• Signals include: unverified email, velocity, disposable email, high-risk country as a weak signal, and impossible travel when one email appears from a different country within your window
• Proxy, VPN and Tor detection: flags Tor exit nodes, datacentre ranges, known VPNs and threat-intelligence blocklists. Only the visitor IP and the email's domain are checked, never the address, and nothing is kept. If detection is unavailable, scoring carries on with local signals and nobody is blocked because of it
• Optional provider: connect your own IPQualityScore key if you wish. A wrong key, an exhausted allowance or an outage never blocks an order
• Review queue and trusted customers: see every held order with client, amount, reason and time; approve to provision or reject to cancel. Trusted customers skip scoring
• Order Guard auto-block and lifetime purchase limits: automatic blocking after repeated failed payments, and limits that count cancelled services so a promo product cannot be re-ordered past the cap
• Reporting: blocks and holds over time, by reason, action and country

Security built in

• Without Pro, PD Shield sends nothing about your customers anywhere. With Pro scoring, the only data sent is the visitor IP and the email's domain, and you can switch it off in Settings while the rest keeps working.
• A provider API key you add is stored encrypted on your own server and sent only to the provider.
• Pro scoring has no per-check credits and no metered cost.

Free and Pro

PD Shield is free and never expires. PD Shield Pro is £12 per month, added to the same licence in place with no reinstall. If Pro lapses, a 14-day grace period keeps Pro features working, then PD Shield carries on as the free version. Your settings and data are kept, and re-adding Pro restores everything. Uninstalling removes the module's tables, settings, files and scheduled jobs.

Requirements

• Blesta 6 or later on PHP 8.2 or later, with the ionCube Loader
• PD Modules, the free control panel every PD module installs into