dcwaterm / pwm

Automatically exported from code.google.com/p/pwm
0 stars 0 forks source link

risk of sms sent many times if contact information is wrong #693

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago
What steps will reproduce the problem?
1. Have a wrong mobile number for the user
2. The user applies password recovery procedure - sms is sent to wrong number
3. no sms arrives - The user tries again - another sms is sent
4 - repeat step 3 many times

Well, that is not a huge issue but the cost of all those sms could be avoided 
by limiting the number of sms sent to one number.

What version of PWM are you using? 1.7.0

What ldap directory and version are you using? 389 server

Please paste any error log messages below:

Original issue reported on code.google.com by mikael.k...@gmail.com on 21 May 2015 at 1:09

GoogleCodeExporter commented 9 years ago
Already in nightlies.

Original comment by jrivard on 21 May 2015 at 3:53