【安全加密】登录设备锁：异地提醒与信任设备管理

-- QF触发: login 设备指纹校验
function onLoginEx(actor, devId)
    local player = class(actor)
    local trusted = getplayvar(player, "HUMAN", "DevTrust")
    if trusted ~= nil and string.find(trusted, devId, 1, true) then
        sendmsg(player, 1, 0, "设备校验通过，祝游戏愉快。")
        return
    end
    setplayvar(player, "HUMAN", "DevFrozen", 1, true)
    sendmail("#" .. (getbaseinfo(player, 3) or ""), 7001,
        "新设备登录提醒",
        "账号在新设备登录，交易与仓库已冻结 2 小时。如非本人操作请立即修改密码。",
        "")
    sendmsg(player, 1, 0, "新设备登录：交易功能冻结 2 小时。")
end

-- 验证口令后把新设备加入信任列表
local player = class(actor)
local pass = getplayvar(player, "HUMAN", "DevPass")
if pass ~= devCode then
    local fails = tonumber(getplayvar(player, "HUMAN", "DevFails") or 0) + 1
    setplayvar(player, "HUMAN", "DevFails", fails, true)
    if fails >= 5 then
        sendmsg(player, 1, 0, "验证失败次数过多，锁定 2 小时。")
        return
    end
    sendmsg(player, 1, 0, "口令错误，剩余尝试次数 " .. (5 - fails) .. " 次。")
    return
end
local trusted = getplayvar(player, "HUMAN", "DevTrust") or ""
local list = {}
for d in string.gmatch(trusted, "[^,]+") do list[#list + 1] = d end
if #list >= 3 then table.remove(list, 1) end
list[#list + 1] = devId
setplayvar(player, "HUMAN", "DevTrust", table.concat(list, ","), true)
setplayvar(player, "HUMAN", "DevFrozen", 0, true)
sendmsg(player, 1, 0, "设备验证通过，功能已恢复。")