It would be good if WHMCS have rate limiting implemented over the forget password form.
To prevent certain abuse of request such as:
- Spamming user's inbox. For example: Enter
[email protected] and submit forgot password request, x50 times. That will trigger 50 emails to
[email protected]'s inbox.
1 Comment
Login to post a comment.