【安全加密】异地登录短信验证：验证码通道与频控设计

local function sendVerifyCode(actor, phone)
    local player = class(actor)
    local nowMin = os.date("%Y%m%d%H%M")
    local minCnt = tonumber(getplayvar(actor, 2, "VC_M_" .. nowMin) or "0")
    if minCnt >= 1 then
        sendmsg(actor, 0, "验证码发送过于频繁，请稍后再试")
        return
    end
    local hourKey = "VC_H_" .. os.date("%Y%m%d%H")
    local hourCnt = tonumber(getplayvar(actor, 2, hourKey) or "0")
    if hourCnt >= 5 then
        sendmsg(actor, 0, "本小时验证码已达上限")
        return
    end
    local code = math.random(100000, 999999)
    setplayvar(actor, "HUMAN", "VC_CODE", code, 1)
    setplayvar(actor, "HUMAN", "VC_TS", os.time(), 1)
    setplayvar(actor, "HUMAN", "VC_M_" .. nowMin, minCnt + 1, 1)
    setplayvar(actor, "HUMAN", hourKey, hourCnt + 1, 1)
    sendluamsg(actor, 9201, code, 0, 0, phone)
end

local function checkVerify(actor, input)
    local player = class(actor)
    local code = tonumber(getplayvar(actor, 2, "VC_CODE") or "0")
    local ts = tonumber(getplayvar(actor, 2, "VC_TS") or "0")
    if os.time() - ts > 300 or tonumber(input) ~= code then
        sendmsg(actor, 0, "验证码错误或已过期")
        return false
    end
    setplayvar(actor, "HUMAN", "VC_CODE", 0, 1)
    sendmsg(actor, 0, "验证通过，本设备已记为可信")
    return true
end