Make SMS auth codes expire after 10 minutes #2480

This commit is contained in:
Kijin Sung 2025-02-13 22:05:38 +09:00
parent 939c5d8160
commit 8eb306e472
3 changed files with 8 additions and 0 deletions

View file

@ -3776,6 +3776,7 @@ class MemberController extends Member
'country' => $phone_country,
'number' => $phone_number,
'code' => $is_special ? intval($config->special_phone_code) : $code,
'time' => time(),
'status' => false,
);
@ -3829,6 +3830,11 @@ class MemberController extends Member
throw new Rhymix\Framework\Exception('verify_by_sms_code_incorrect');
}
if (isset($_SESSION['verify_by_sms']['time']) && $_SESSION['verify_by_sms']['time'] < time() - 600)
{
throw new Rhymix\Framework\Exception('verify_by_sms_code_expired');
}
$_SESSION['verify_by_sms']['status'] = true;
return new BaseObject(0, 'verify_by_sms_code_confirmed');
}