【安全加密】大额转账二次验证：倒计时确认的安全接口设计

local player = class(actor)
if not isplayer(actor) then return end
local amount = tonumber(param) or 0
if amount > 500000 then
    local token = tostring(os.time()) .. math.random(1000, 9999)
    setplayvar(actor, "HUMAN", "TRADE_TOKEN", token, 0)
    setplayvar(actor, "HUMAN", "TRADE_AMT", amount, 0)
    player:takeitem("金币", amount)
    setontimer(actor, 771, 60, 1)
    sendmsg(actor, 0, "转账已提交，60秒内输入确认令牌生效")
    return
end
doTrade(player, amount)

function ontimer771(actor)
    local token = getplayvar(actor, 2, "TRADE_TOKEN")
    if token ~= nil and token ~= "" then
        local amt = tonumber(getplayvar(actor, 2, "TRADE_AMT")) or 0
        class(actor):giveitem("金币", amt)
        setplayvar(actor, "HUMAN", "TRADE_TOKEN", "", 0)
        sendmsg(actor, 0, "转账超时未确认，金额已退回")
    end
end