fanbinit/rhymix
1
0
Fork 0
mirror of https://github.com/Lastorder-DC/rhymix.git synced 2026-01-09 03:32:00 +09:00
Code Issues Projects Releases Packages Wiki Activity

Fix #1660 #1826 limit SMS auth attempts from same IP

Browse source
This commit is contained in:
Kijin Sung 2021-12-31 14:56:30 +09:00
parent ff2e04fb8f
commit 8d1dd026ef
6 changed files with 46 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

15
modules/member/member.controller.php
View file

@ -3601,6 +3601,21 @@ class memberController extends member
$is_special = ($config->special_phone_number && $config->special_phone_number === preg_replace('/[^0-9]/', '', $phone_number));
// Check if SMS has already been sent
if (!$is_special)
{
$args = new stdClass;
$args->phone_number = $phone_number;
$args->phone_country = $phone_country;
$args->ipaddress = \RX_CLIENT_IP;
$args->regdate_since = date('YmdHis', time() - ($config->max_auth_sms_count_time ?: 600));
$output = executeQuery('member.chkAuthSms', $args);
if ($output->data->count >= ($config->max_auth_sms_count ?: 5))
{
return new BaseObject(-1, 'msg_auth_sms_rate_limited');
}
}
// Check if phone number is duplicate
if (!$is_special && $config->phone_number_allow_duplicate !== 'Y')
{