Download & Extend
SMS Framework » Issues

sms_sendtophone allows you to send SMS without confirming your number

Posted by jpmckinney on August 21, 2009 at 6:50pm
Project:SMS Framework
Version:6.x-2.x-dev
Component:Send to Phone
Category:bug report
Priority:normal
Assigned:Unassigned
Status:closed (fixed)

Issue Summary

sms_sendtophone_page() checks if the user has set a number but does not check if the number has been confirmed. Thus, users effectively have the 'send to any number' permission. This should be fixed. I've prepared a patch. This patch also includes my trivial fixes from #555922: Unreachable code: "You need need to setup your mobile phone to send messages" and #556002: Typo: repetition of "need" in sms_sendtophone_page().

AttachmentSize
sms_sendtophone_page_fixes.patch1.38 KB
Login or register to post comments

Comments

#1

Posted by alone boy on September 29, 2009 at 6:24am

fine

#2

Posted by univate on November 20, 2010 at 7:53am
Status:needs review» fixed

This fix committed.

#3

Posted by System Message on December 4, 2010 at 8:00am
Status:fixed» closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.