You need to set both of them to be after confirmation and after approval. You need to do this for all your plans.

I don't see how they could possibly pay if you set them both to wait for until approval and confirmation unless you don't have approval or confirmation enabled. Please PM backend super administrator login credentials and will take a look.

Once you register do not even confirm your email but return to the home page and log in with the credentials you just created. You will get the payment page.

I must have missed this detail in your topic that you PMed, but I believe that explains the issue. CBSubs brings up the payment process on login attempt. This is normal as it sees you've an unpaid basket that needs to be paid. It doesn't block the payment because you can set your site to not allow free registrations and if you expire it blocks the account until you pay.

As long as it's not asking them to pay during the registration process it's working as intended.

I have however added a feature ticket to improve on the login check so it will do best effort not to do this if possible.

#4163

so in short I cannot prevent people from paying (assuming someone figures out this loophole)?

Correct, but honestly I don't see many users attempting to login directly after registering before confirming.

Once they pay, this may leave us in a legally binding position.

In the extremely rare case that this happens you can just refund the user directly from CBSubs > Payments. The chances of a user doing this though are extremely slim.

Until your ticket is reviewed and worked are there any ways around this?

Don't allow plan selection at registration. Instead set the first time login redirect to your CBSubs plan page in CB > Configuration > Registration that way on their first time logging in they'll be asked to subscribe.