Giters

azerothcore / acore-cms

Acore CMS based on Wordpress

Home Page:https://www.azerothcore.org/acore-cms/

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

RAF Module same ID possible

55Honey opened this issue · comments

commented

It's currently possible to recruit ones own account, hence same recruiter and recruit id. I think we need to prevent this from the website.
"You can not recruit your own account."

Also, as a Feature request, the site should check for the last IP of the accounts in the auth.account database and prevent a RAF bind, if they match and are not nil (never logged in before).
"You can not recruit accounts on the same IP."

The check for same IP abuse is a config flag in the Lua. It would be a plus, If it was a config flag in the acore_cms module, too. The default can be "on".