【安全加密】敏感操作二次密码：资金操作的双闸口体系

local SENSITIVE = { trade_gold = true, unbind = true, warehouse_out = true }
local fails = {}
local function gateCheck(actor, op, pwd)
    local player = class(actor)
    if not SENSITIVE[op] then return true end
    local name = player:GetName()
    local lockUntil = tonumber(getplayvar(actor, 2, "GPWD_LOCK") or "0")
    if lockUntil > os.time() then
        sendmsg(actor, 0, "二级密码已锁定，剩余" .. math.ceil((lockUntil - os.time()) / 60) .. "分钟")
        return false
    end
    local pwdSet = getplayvar(actor, 2, "GPWD_SET")
    if pwdSet ~= 1 then
        sendmsg(actor, 0, "请先在安全中心设置二级密码")
        return false
    end
    local real = getplayvar(actor, 2, "GPWD_VAL")
    if pwd ~= real then
        local n = (fails[name] or 0) + 1
        fails[name] = n
        if n >= 5 then
            setplayvar(actor, "HUMAN", "GPWD_LOCK", os.time() + 1800, 1)
            fails[name] = 0
            sendmsg(actor, 0, "错误次数过多，二级密码锁定30分钟")
        end
        return false
    end
    fails[name] = 0
    return true
end

local function setGpwd(actor, mainPwd, newPwd)
    local player = class(actor)
    local main = getplayvar(actor, 2, "MAIN_PWD_CHECK")
    if main ~= 1 then
        sendmsg(actor, 0, "请先完成主密码验证")
        return
    end
    if #newPwd ~= 6 or tonumber(newPwd) == nil then
        sendmsg(actor, 0, "二级密码须为6位纯数字")
        return
    end
    setplayvar(actor, "HUMAN", "GPWD_VAL", newPwd, 1)
    setplayvar(actor, "HUMAN", "GPWD_SET", 1, 1)
    sendmsg(actor, 0, "二级密码设置成功")
end