第57批续19-hotfix: login_verified 语义纠偏(严格按isLoggedIn推)
续19把login_verified按isRegistered推, 导致'已注册但未登录'的玩家也被推1 → PHP validateWebAccess view路径直接放行(绕过密码), 游戏里还在提示/login 但php已判定登录成功(与游戏状态不一致)。 修复: autoGenerate/handleWebLogin 两处push URL的login_verified改回 isLoggedIn(只有/login密码验证成功才=1), 已注册但未登录=0(网页要求输密码)。 PHP侧续19已有的web_login_verified 10分钟窗口做'登录状态同步延迟'兜底不受影响。 mvn -q -o clean package 编译通过, jar 1546400字节。
This commit is contained in:
@@ -9256,8 +9256,8 @@ public class WebManager {
|
|||||||
+ "&online=1"
|
+ "&online=1"
|
||||||
+ "®istered=" + (isRegistered ? "1" : "0")
|
+ "®istered=" + (isRegistered ? "1" : "0")
|
||||||
+ "&ip=" + java.net.URLEncoder.encode(playerIp, "UTF-8")
|
+ "&ip=" + java.net.URLEncoder.encode(playerIp, "UTF-8")
|
||||||
// ★ 第57批续19: login_verified 状态位统一管理 —— 手动 /weblogin 同逻辑(已注册推1, 未注册推0)
|
// ★ 第57批续19-hotfix: login_verified 严格按 isLoggedIn 推 —— 手动 /weblogin 同逻辑
|
||||||
+ "&login_verified=" + (isRegistered ? "1" : "0")
|
+ "&login_verified=" + (isLoggedIn ? "1" : "0")
|
||||||
+ "&email_suffix_mode=" + java.net.URLEncoder.encode(config != null ? config.getEmailValidationMode() : "默认", "UTF-8")
|
+ "&email_suffix_mode=" + java.net.URLEncoder.encode(config != null ? config.getEmailValidationMode() : "默认", "UTF-8")
|
||||||
+ "&email_suffix_list=" + java.net.URLEncoder.encode(config != null ? config.getEmailSuffixList() : "", "UTF-8"); // ★ 按实际登录状态告知PHP(未登录推0让PHP清除旧记录)
|
+ "&email_suffix_list=" + java.net.URLEncoder.encode(config != null ? config.getEmailSuffixList() : "", "UTF-8"); // ★ 按实际登录状态告知PHP(未登录推0让PHP清除旧记录)
|
||||||
String response = doGet(urlStr);
|
String response = doGet(urlStr);
|
||||||
@@ -9357,8 +9357,8 @@ public class WebManager {
|
|||||||
+ "&online=1"
|
+ "&online=1"
|
||||||
+ "®istered=" + (isRegistered ? "1" : "0")
|
+ "®istered=" + (isRegistered ? "1" : "0")
|
||||||
+ "&ip=" + java.net.URLEncoder.encode(playerIp, "UTF-8")
|
+ "&ip=" + java.net.URLEncoder.encode(playerIp, "UTF-8")
|
||||||
// ★ 第57批续19: login_verified 状态位统一管理 —— 已注册/已登录推1(网页直接放行), 未注册推0(网页要求输密码/注册)
|
// ★ 第57批续19-hotfix: login_verified 严格按 isLoggedIn 推 —— 仅"密码验证通过"才=1, 已注册但未登录=0(网页要求输密码)
|
||||||
+ "&login_verified=" + (isRegistered ? "1" : "0")
|
+ "&login_verified=" + (isLoggedIn ? "1" : "0")
|
||||||
+ "&email_suffix_mode=" + java.net.URLEncoder.encode(config != null ? config.getEmailValidationMode() : "默认", "UTF-8")
|
+ "&email_suffix_mode=" + java.net.URLEncoder.encode(config != null ? config.getEmailValidationMode() : "默认", "UTF-8")
|
||||||
+ "&email_suffix_list=" + java.net.URLEncoder.encode(config != null ? config.getEmailSuffixList() : "", "UTF-8");
|
+ "&email_suffix_list=" + java.net.URLEncoder.encode(config != null ? config.getEmailSuffixList() : "", "UTF-8");
|
||||||
String response = doGet(urlStr);
|
String response = doGet(urlStr);
|
||||||
|
|||||||
Reference in New Issue
Block a user