Checking uniqueness of unconfirmed number

rgucci - March 25, 2009 - 04:02
Project:SMS Framework
Version:5.x-1.2
Component:Core Framework
Category:bug report
Priority:normal
Assigned:Unassigned
Status:closed
Description

Right now, one cannot enter a mobile number if it has already been registered on the site, even if the existing mobile number is unconfirmed. This doesn't really make sense, as anyone can input anyone else's mobile number and prevent the real owner from using their own numbers.

There needs to be two changes
1. When inputting a new mobile number, it should be checked for uniqueness only against confirmed numbers.
2. When confirming a mobile number, it should be checked for uniqueness against other confirmed numbers

(2) is necessary because (1) allows the same number to be unconfirmed, and in the very small possibility that the separate user accounts both have access to the same mobile phone number.

#1

Will White - May 12, 2009 - 22:54
Status:active» fixed

Committed fix to all active branches. Thanks!

#2

System Message - May 26, 2009 - 23:00
Status:fixed» closed

Automatically closed -- issue fixed for 2 weeks with no activity.

 
 

Drupal is a registered trademark of Dries Buytaert.