From 716f67844d7f34664e17d6f0a6be061b632143dc Mon Sep 17 00:00:00 2001
From: FreddleSpl0it <75116288+FreddleSpl0it@users.noreply.github.com>
Date: Wed, 4 Nov 2026 15:44:57 +0100
Subject: [PATCH] [Web] mobileconfig: Wait for a pending account setup

---
 data/web/mobileconfig.php | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/data/web/mobileconfig.php b/data/web/mobileconfig.php
index 02e0e9a56..af387b7c6 100644
--- a/data/web/mobileconfig.php
+++ b/data/web/mobileconfig.php
@@ -12,6 +12,10 @@ if (!isset($_SESSION['mailcow_cc_role']) || $_SESSION['mailcow_cc_role'] != 'use
   header('Location: index.php?mobileconfig' . $append_get);
   die();
 }
+if (!empty($_SESSION['pending_tfa_setup']) || !empty($_SESSION['pending_pw_update'])) {
+  header('Location: /');
+  die();
+}
 
 error_reporting(0);