If I am using direct bill, how do I make sure my employees/concierge/etc do not just pass the link to the store to their friends?Ticket Store Link Password: The link can be associated with a password. This password is automatically generated and will add a password request if the Affiliate uses the Ticket Store Link. You can remove this password if the client does not require. Or alternatively add or upload multiple passwords. If you want stricter control into the store it is recommended to use this. The client should come up with their own password and make it as similar to the store name as possible. There are times that you might want to limit access to the store, in these situations what you can do is manage multiple passwords. You can have more than one password and it will track how many times a password is used
Ticket Store IP Addr. (Opt.): We can lock the store to one or more particular IP addresses, so only certain computers can access the store and purchase tickets. You can password lock your link, and change the password on a regular basis. If you want to limit who has access to the store you can use this feature. What the IP address filter does is it will only allow transactions from IP addresses that are defined in this box (in SS below).
So what some of our clients do is, they will take the IP addresses of all the machines in say a AAA office, it could be a range of addresses they can put them in here and only transactions that exist within these ranges will be allowed.
This allows you to lock the IP address of the computer(s) that have access to the store link. --- This allows you to filter transactions by IP address, transactions originating from this IP address will be of status complete. Any transactions originating from an IP Address not in the specified list will not be allowed to complete.

Referrer URL Lock (Opt.): is also a similar security function that basically allows you to put a lock on the store such that only transactions where the origination URL to the link must come from here (In the box in the SS above). So if for ex it’s a AAA then you would put www. Aaa.com/memberbenfits and it will only allow transactions if the user got to the affiliate store page from that URL.