Hello,
below I’m sending a suggestion for improving the messages.
Issue description:
After implementing the plugin, spammers appeared who tried to get through the OTP system using dozens of random phone numbers. Naturally, they quickly used up several dozen euros.
To prevent such abuse, I suggest upgrading the plugin as follows:
Allow a user to request a maximum of 3 codes (e.g. one code every 2 minutes). A new user can request codes for no more than two different phone numbers. If they reach these limits, they should be automatically blocked and shown a message such as: “Please contact the administration to activate your account.”
Best regards, Luka