Leaky Paywall 5.2.1 is out. This is a security and billing release, and we recommend updating right away.
Security
- Registration form protection: The Stripe registration form now checks its security token on the first step, before a Stripe customer is created.
- Verified one-time purchases: A one-time purchase activates only when Stripe confirms a payment from that subscriber’s customer record. If the payment is missing, failed, or doesn’t match, the subscriber stays pending until it arrives.
Subscription and billing fixes
- No access before payment: Stripe subscription signups no longer activate before the first payment is confirmed.
- Canceled means canceled: Subscribers whose subscription is canceled in Stripe now lose access.
- Clean resubscribes: Past-due readers who resubscribe now pay for a new subscription instead of being switched onto the unpaid one. The old subscription and its unpaid invoice are cleaned up.
- Correct plan switch charges: Logged-in subscribers who switch plans are charged and recorded with the correct switch amount.
- Accurate trials: A Stripe subscription that reports as trialing is only marked as a trial in Leaky Paywall when the level actually has one.
Emails and checkout
- Emails wait for payment: The welcome email, admin new subscriber email and payment receipt now go out when a pending payment completes, not before.
- No lost signups: If WordPress refuses to create a paying subscriber’s account, it keeps the registration so you can complete it later; your site admin is emailed the subscriber’s details.
- Checkout recovery: A logged-in reader whose saved Stripe customer no longer exists can now check out. Leaky Paywall creates a new Stripe customer for them.
What to do next
Update to 5.2.1 from Dashboard > Updates in WordPress.
Questions about the update? Reply to this email
Thanks for being a Leaky Paywall publisher.
