{"id":2119,"date":"2025-10-23T10:52:59","date_gmt":"2025-10-23T05:22:59","guid":{"rendered":"https:\/\/www.smsgatewaycenter.com\/blog\/?post_type=docs&#038;p=2119"},"modified":"2025-10-23T10:59:15","modified_gmt":"2025-10-23T05:29:15","password":"","slug":"how-secure-is-recurring-sms-who-can-access-my-campaigns","status":"publish","type":"docs","link":"https:\/\/www.smsgatewaycenter.com\/blog\/kb\/how-secure-is-recurring-sms-who-can-access-my-campaigns\/","title":{"rendered":"How secure is Recurring SMS? Who can access my campaigns?"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><strong>Recurring SMS<\/strong> implements enterprise-grade security measures.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Data Isolation:<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2705 <strong>User-Level Separation:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>You can ONLY see your own campaigns<\/li>\n\n\n\n<li>Cannot view or modify other users&#8217; campaigns<\/li>\n\n\n\n<li>Even if you guess campaign IDs<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\u2705 <strong>Reseller Hierarchy:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Resellers see their own campaigns<\/li>\n\n\n\n<li>Cannot access parent or child user campaigns<\/li>\n\n\n\n<li>Complete isolation maintained<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Authentication &amp; Authorization:<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2705 <strong>Login Required:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Must be logged in to access<\/li>\n\n\n\n<li>Session timeout after inactivity<\/li>\n\n\n\n<li>Auto-logout on suspicious activity<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\u2705 <strong>CSRF Protection:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>All forms protected against Cross-Site Request Forgery<\/li>\n\n\n\n<li>Secure tokens on every action<\/li>\n\n\n\n<li>Prevents unauthorized commands<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\u2705 <strong>Role-Based Access:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Only users with SMS permissions<\/li>\n\n\n\n<li>Admins cannot access user campaigns directly<\/li>\n\n\n\n<li>Audit trail maintained<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Cron Security:<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2705 <strong>CLI-Only Execution:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Cron runs only via command line<\/li>\n\n\n\n<li>Cannot be triggered from browser<\/li>\n\n\n\n<li>Prevents unauthorized execution<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\u2705 <strong>Token Authentication:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Unique secret token required<\/li>\n\n\n\n<li>Token stored securely<\/li>\n\n\n\n<li>Regular token rotation recommended<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\u2705 <strong>Timeout Detection:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>5-minute execution limit<\/li>\n\n\n\n<li>Automatic timeout alerts<\/li>\n\n\n\n<li>Prevents resource abuse<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Data Protection:<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2705 <strong>Encrypted Storage:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Sensitive data encrypted at rest<\/li>\n\n\n\n<li>Secure transmission (HTTPS)<\/li>\n\n\n\n<li>Password protection<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\u2705 <strong>Input Validation:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>All inputs sanitized<\/li>\n\n\n\n<li>SQL injection prevention<\/li>\n\n\n\n<li>XSS protection<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\u2705 <strong>Rate Limiting:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Prevents abuse<\/li>\n\n\n\n<li>API rate limits<\/li>\n\n\n\n<li>Protects against spam<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>API Security:<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2705 <strong>Secure Communication:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>API keys never exposed<\/li>\n\n\n\n<li>Encrypted data transmission<\/li>\n\n\n\n<li>Proper authentication headers<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Audit &amp; Logging:<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2705 <strong>Comprehensive Logging:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>All actions logged<\/li>\n\n\n\n<li>Timestamp and user tracking<\/li>\n\n\n\n<li>Cannot be modified by users<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\u2705 <strong>Execution History:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Complete audit trail<\/li>\n\n\n\n<li>Who created\/modified campaigns<\/li>\n\n\n\n<li>When changes were made<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Best Practices for Users:<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2714 <strong>Strong Passwords:<\/strong><\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li><\/li>\n<\/ol>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Use complex passwords<\/li>\n\n\n\n<li>Change regularly<\/li>\n\n\n\n<li>Don&#8217;t share credentials<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\u2714 <strong>Logout When Done:<\/strong><\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li><\/li>\n<\/ol>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Especially on shared computers<\/li>\n\n\n\n<li>Close browser after use<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\u2714 <strong>Monitor Activity:<\/strong><\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li><\/li>\n<\/ol>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Review execution reports<\/li>\n\n\n\n<li>Check for unexpected campaigns<\/li>\n\n\n\n<li>Report suspicious activity<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\u2714 <strong>Secure API Keys:<\/strong><\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li><\/li>\n<\/ol>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Don&#8217;t share with others<\/li>\n\n\n\n<li>Rotate if compromised<\/li>\n\n\n\n<li>Use different keys for test\/prod<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\u2714<strong>Review Permissions:<\/strong><\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li><\/li>\n<\/ol>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Limit team member access<\/li>\n\n\n\n<li>Use role-based permissions<\/li>\n\n\n\n<li>Audit user access regularly<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Compliance:<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2705 <strong>GDPR Ready:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Data deletion on request<\/li>\n\n\n\n<li>Export user data<\/li>\n\n\n\n<li>Consent management<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\u2705 <strong>DLT Compliance:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Template validation<\/li>\n\n\n\n<li>Mandatory sender ID<\/li>\n\n\n\n<li>Message template matching<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Incident Response:<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If you suspect security issue:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2713 <strong>Immediately:<\/strong><\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li><\/li>\n<\/ol>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Change password<\/li>\n\n\n\n<li>Pause all campaigns<\/li>\n\n\n\n<li>Logout all sessions<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\u2713 <strong>Contact Support:<\/strong><\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li><\/li>\n<\/ol>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Report incident details<\/li>\n\n\n\n<li>Provide suspicious activity logs<\/li>\n\n\n\n<li>Follow guidance from support team<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\u2713 <strong>Review Activity:<\/strong><\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li><\/li>\n<\/ol>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Check execution reports<\/li>\n\n\n\n<li>Verify campaign settings<\/li>\n\n\n\n<li>Monitor credit usage<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>Recurring SMS implements enterprise-grade security measures. Data Isolation: \u2705 User-Level Separation: \u2705 Reseller Hierarchy: Authentication &amp; Authorization: \u2705 Login Required: \u2705 CSRF Protection: \u2705 Role-Based Access: Cron Security: \u2705 CLI-Only Execution: \u2705 Token Authentication: \u2705 Timeout Detection: Data Protection: \u2705 Encrypted Storage: \u2705 Input Validation: \u2705 Rate Limiting: API Security: \u2705 Secure Communication: Audit &amp; [&hellip;]<\/p>\n","protected":false},"author":118,"featured_media":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"doc_category":[1740],"doc_tag":[],"class_list":["post-2119","docs","type-docs","status-publish","hentry","doc_category-recurring-sms"],"year_month":"2026-07","word_count":348,"total_views":0,"reactions":{"happy":0,"normal":0,"sad":0},"author_info":{"name":"admin","author_nicename":"admin","author_url":"https:\/\/www.smsgatewaycenter.com\/blog\/author\/admin\/"},"doc_category_info":[{"term_name":"Recurring SMS","term_url":"https:\/\/www.smsgatewaycenter.com\/blog\/kb-cat\/recurring-sms\/"}],"doc_tag_info":[],"_links":{"self":[{"href":"https:\/\/www.smsgatewaycenter.com\/blog\/wp-json\/wp\/v2\/docs\/2119","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.smsgatewaycenter.com\/blog\/wp-json\/wp\/v2\/docs"}],"about":[{"href":"https:\/\/www.smsgatewaycenter.com\/blog\/wp-json\/wp\/v2\/types\/docs"}],"author":[{"embeddable":true,"href":"https:\/\/www.smsgatewaycenter.com\/blog\/wp-json\/wp\/v2\/users\/118"}],"replies":[{"embeddable":true,"href":"https:\/\/www.smsgatewaycenter.com\/blog\/wp-json\/wp\/v2\/comments?post=2119"}],"version-history":[{"count":0,"href":"https:\/\/www.smsgatewaycenter.com\/blog\/wp-json\/wp\/v2\/docs\/2119\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.smsgatewaycenter.com\/blog\/wp-json\/wp\/v2\/media?parent=2119"}],"wp:term":[{"taxonomy":"doc_category","embeddable":true,"href":"https:\/\/www.smsgatewaycenter.com\/blog\/wp-json\/wp\/v2\/doc_category?post=2119"},{"taxonomy":"doc_tag","embeddable":true,"href":"https:\/\/www.smsgatewaycenter.com\/blog\/wp-json\/wp\/v2\/doc_tag?post=2119"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}