RAF Module same ID possible
55Honey opened this issue · comments
It's currently possible to recruit ones own account, hence same recruiter and recruit id. I think we need to prevent this from the website.
"You can not recruit your own account."
Also, as a Feature request, the site should check for the last IP of the accounts in the auth.account database and prevent a RAF bind, if they match and are not nil (never logged in before).
"You can not recruit accounts on the same IP."
The check for same IP abuse is a config flag in the Lua. It would be a plus, If it was a config flag in the acore_cms module, too. The default can be "on".