挂售

app/api/controller/AuthController.php

@@ -188,7 +188,7 @@ class AuthController
         if (SmsRecord::where('add_ip', $request->ip())->whereDay('add_time')->count() >= $maxIpCount) {
             return app('json')->fail('此IP今日发送次数已经达到上限');
         }
-        $time = 60;
+        $time = 600;
 //        if (CacheService::get('code_' . $phone))
 //            return app('json')->fail($time . '秒内有效');
         $code = rand(100000, 999999);

app/api/controller/user/UserController.php

@@ -5,6 +5,7 @@ namespace app\api\controller\user;
 use app\http\validates\user\AddressValidate;
 use app\models\auction\AuctionOrder;
 use app\models\system\SystemCity;
+use crmeb\services\CacheService;
 use think\exception\ValidateException;
 use app\Request;
 use app\models\user\UserLevel;
@@ -682,7 +683,9 @@ class UserController
         $data = UtilService::postMore([
             ['type'],
             ['payment'],
-            ['old_payment']
+            ['old_payment'],
+            ['account'],
+            ['captcha'],
         ], $request);
         if (!$data['type']) return app('json')->fail('类型不能为空');
         if (!$data['payment']) return app('json')->fail('密码不能为空');
@@ -702,7 +705,13 @@ class UserController
                 return app('json')->fail('失败');
             }
         }elseif ($data['type'] == 2){
-            if (md5($data['old_payment']) != $user['payment']) return app('json')->fail('旧密码错误');
+//            if (md5($data['old_payment']) != $user['payment']) return app('json')->fail('旧密码错误');
+            $verifyCode = CacheService::get('code_' . $data['account']);
+            if (!$verifyCode)
+                return app('json')->fail('请先获取验证码');
+            $verifyCode = substr($verifyCode, 0, 6);
+            if ($verifyCode != $data['captcha'])
+                return app('json')->fail('验证码错误');
             $user['payment'] = md5($data['payment']);
             if ($user->save()){
                 return app('json')->success('成功');