Hello MB Themes,
I have found two issues with the plugin.
**1. No limit on phone verification SMS attempts during registration**
There is currently no limit on the number of verification SMS messages that can be sent when phone verification is required during registration.
As a result, two bots from the United States registered on my website and spent the entire night repeatedly requesting phone verification codes. This caused significant SMS service costs.
There is a delay of around 30–40 seconds between SMS requests, but this is not enough. I believe there should be a limit on the total number of verification attempts per email address (or account). In my opinion, it's better to lose a potential user than to risk unlimited SMS expenses caused by bots endlessly requesting verification codes.
**2. Phone verification workflow when posting an ad**
This issue is less critical, but still important.
The phone verification process during ad submission is not working correctly. Currently, the user first creates and submits an ad, the ad is sent for moderation, and only then the user is redirected to the phone verification screen.
In practice, about 90% of users simply close the verification window instead of completing the process.
As a result:
* the ad is already waiting for moderation;
* the phone number remains unverified;
* and a lot of AI tokens have already been wasted processing an ad that may never become valid.
I think the workflow should be changed.
From my experience, when users want to post an ad, they are willing to complete any required steps first (for example, accepting GDPR terms). Therefore, if phone verification is enabled, I suggest requiring users to verify their phone number **before** allowing them to access the ad submission form. This would improve security for both buyers and sellers and prevent unnecessary processing of incomplete submissions.
Thank you for your attention, and I hope you will consider these suggestions.