[XTR] SMS Verification 1.0.6

This maintenance and security update brings essential stability fixes, hardened authentication workflows, interface refinements, and notable performance optimizations.

Key highlights of this release:

• Hardened Login & Account Security: Multi-factor authentication (2FA) and ban/disable checks are now strictly enforced across Quick SMS Login and SMS Password Reset flows.
• Refined User Experience: SMS preference toggles are now cleanly hidden from unverified members across all account settings, eliminating confusion.
• Administrative Customization: The scrollable Terms & Rules box height on SMS verification pages can now be dynamically configured via the Admin Control Panel.
• Performance & Page Speed: Badge rendering in thread lists and user lists has been thoroughly streamlined to eliminate unnecessary database load and improve response times.

---

Change Log

• Fix: Resolved an issue where saving account details could inadvertently erase or mutate verified mobile numbers without SMS confirmation.
• Fix: Enforced Two-Step Verification (2FA) and account ban/disabled checks during Quick SMS Login and Lost Password resets.
• Fix: Prevented unverified phone numbers from persisting during Two-Step Verification setup before valid code submission, and implemented brute-force attempt limits.
• Fix: Hidden SMS notification and phone visibility toggles on Account Details, Preferences, and Privacy pages for members who have not verified their phone.
• New: Added a new Admin Control Panel option to customize the height of the scrollable Terms and Rules box on SMS confirmation screens.
• Fix: Restored moderator/administrator bypass permissions across restricted forums, threads, and direct messages.
• Fix: Removed restriction that prevented unverified users from leaving direct message conversations.
• Fix: Fixed payload escaping and URL-encoding issues for MutluCell and VatanSMS gateway providers when handling special characters.
• Optimization: Significantly reduced database query overhead when displaying SMS verified badges across member lists and thread listings.
• Optimization: Improved IP address handling and reliability for Bulk SMS jobs and background CLI cron tasks.

This update resolves several important issues affecting SMS two-step verification and phone verification statuses.

An issue that could cause a server error when users attempted to log in after enabling SMS two-step verification has been fixed. If the waiting period for requesting another verification code has not yet expired, an error page is no longer displayed. The user is now informed about the waiting period, and the previously sent valid code can still be used.

An issue that could incorrectly identify users as verified before they had completed phone verification has been resolved. An account is now considered verified only when it has a phone number and the verification process has been successfully completed.

Users without a phone number, or users who have not yet completed verification, will no longer see a message stating that their phone number has been verified.

The display issue that showed the SMS terms as “Declined” before the user had made a selection has been fixed. Acceptance and preference information is now displayed only when the account’s verification status is appropriate.

Unverified users will no longer receive the verified account badge or appear in the verified members list. Verified phone filters in the administration panel have also been updated to follow the same verification rules.

A link issue that could cause the “Verify now” button to open the wrong page has also been corrected.

This release provides more accurate and consistent SMS verification information across user accounts, badges, member lists, and two-step verification screens.

Change Log

• Fixed a server error that could prevent login when SMS two-step verification was enabled.
• Prevented an error page from being displayed while the code resend waiting period is still active.
• Added a clear waiting-period notification for users requesting another code too soon.
• Preserved the previously sent valid code during the resend waiting period.
• Prevented users with unverified phone numbers from being displayed as verified.
• Updated verification rules so that both a phone number and completed verification are required.
• Fixed an incorrect verification message shown to users without a phone number.
• Fixed SMS terms being displayed as “Declined” before the user had made a selection.
• Prevented unverified users from receiving the verified account badge.
• Prevented unverified users from appearing in the verified members list.
• Updated verified phone filters in the administration panel.
• Corrected the destination of the “Verify now” button.
• Improved consistency of SMS verification statuses across account pages and member displays.

We are pleased to announce the release of [XTR] SMS Verification 1.0.4. This maintenance and feature update introduces granular phone number masking options for administrators and strictly enforces verification badges only for members with a registered mobile number.

• Configurable Phone Number Masking:
  New options have been added under Admin CP > Options to give administrators full control over how phone numbers are masked on public directory cards:
  • Visible start digits: Specify how many digits to reveal at the beginning of the number (e.g. 4 digits -> 0532).
  • Visible end digits: Specify how many digits to reveal at the end of the number (e.g. 2 digits -> **12 or 0 to keep all trailing digits masked).
• Strict Verification Verification Badge Requirement:
  Users who were previously assigned to verified groups by legacy add-ons but lack a registered phone number will no longer display verified checkmark badges. Only members who actually possess a valid phone number will be recognized as SMS verified and displayed in member lists.

---

• New Feature: Added configurable options for visible start and end digits when masking phone numbers publicly.
• Improvement: Refactored mobile masking getter to dynamically adapt to administrator options.
• Fix: Prevented users without registered phone numbers from inheriting verified badges through user group assignments.
• Fix: Restricted SMS verified member list exclusively to accounts with valid phone records.

This update focuses on optimizing the SMS verified member badge system to enhance user experience and ensure seamless compatibility across your community. Verified account badges are now fully isolated from username group styling and third-party add-ons, always maintaining their configured color. In addition, an informative hover tooltip has been introduced.

• Improvement: The SMS verified badge color is now completely isolated from username group styles, ensuring it always displays with its exact configured color.
• New: Added an "SMS verified" tooltip when hovering over the verified account badge.
• Improvement: Ensured smooth and consistent badge display across all locations (including thread list last posters) without overlapping or conflicting with other customization badges.
• Fix: Resolved an issue where the badge could intermittently fail to appear on certain pages and listings.

We are pleased to announce the release of version 1.0.2 for [XTR] SMS Verification, designed to enhance member verification reliability and streamline account onboarding.

This update focuses on strengthening gateway communication across all supported SMS providers and ensuring seamless message delivery. Error feedback and notification alerts have been fully integrated into XenForo's language system, making any provider responses clear, friendly, and easy to understand for administrators and members alike. Furthermore, phone number entry handling has been refined to automatically adapt to provider standards without user hassle.

We strongly recommend all users running XenForo 2.3.x to upgrade to version 1.0.2 for the best experience.

• Enhanced SMS Provider Reliability: Gateway transmission handling was updated across all supported providers (NetGSM, MutluCell, VatanSMS, KaynakSMS, IletiMerkezi, BulkSMS, SendPulse, Twilio) for consistent delivery.
• Phrase System Integration: All provider response summaries, status notifications, and error descriptions have been fully migrated to XenForo phrases for effortless localization.
• Smart Phone Number Formatting: Phone number inputs with or without leading zeroes and area codes are now automatically sanitized and matched to provider requirements.
• Admin Panel Enhancements: Setup and configuration fields have been unified with proper phrases and clear field descriptions.

We are pleased to announce the release of 1.0.1 for [XTR] SMS Verification, bringing full compatibility enhancements and important stability fixes for the XenForo 2.3.x series.

What's New in This Version?
This maintenance update addresses an issue reported during mass SMS dispatch from the Admin Control Panel. Sending announcements and updates to your members now operates smoothly through the confirmation step, ensuring that only opted-in recipients are correctly targeted while preserving all other member search criteria.

In addition, missing phrase labels for user profile fields and SMS status information in the administration area have been included to provide a cleaner management experience.

Upgrade Recommendation:
We strongly recommend all administrators running XenForo 2.3.x to update to version 1.0.1 for optimal performance and reliability.

• Fix: Resolved an issue where confirming mass SMS dispatch in the Admin Control Panel caused an unexpected error on XenForo 2.3.x.
• Fix: Restored full compatibility for SMS provider status toggling and deletion actions with the XenForo 2.3.x core.
• Improvement: Enhanced user search criteria merging during bulk SMS sending to ensure selected member filters remain intact.
• Added: Included missing language phrases for user profile information and SMS status (xentr_mobile, xentr_sms_last_change, xentr_sms_state).