Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Securisation of reset by SMS token feature #851

Merged
merged 75 commits into from
Mar 20, 2024

Conversation

armfem
Copy link
Contributor

@armfem armfem commented Mar 8, 2024

Solving the Issue #165 multiple sms tokens. Changing default behaviour for sms sending, now it asks for telephone number by default.

htdocs/sendsms.php Outdated Show resolved Hide resolved
htdocs/sendsms.php Outdated Show resolved Hide resolved
htdocs/sendsms.php Show resolved Hide resolved
htdocs/sendsms.php Outdated Show resolved Hide resolved
htdocs/sendsms.php Show resolved Hide resolved
htdocs/sendsms.php Outdated Show resolved Hide resolved
@armfem
Copy link
Contributor Author

armfem commented Mar 12, 2024

I have added the requested changes as well as updated the language files.

@coudot coudot changed the title Issue 165 multiple sms tokens Securisation of reset by SMS token feature Mar 14, 2024
@coudot coudot added this to the 1.6.0 milestone Mar 14, 2024
@coudot coudot merged commit 4f06056 into ltb-project:master Mar 20, 2024
@coudot coudot deleted the issue-165-multiple_sms_tokens branch March 20, 2024 17:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Multiple SMS tokens could be requested if an attacker finds one username, leading to big expenses
4 participants