From 685a1dace2ad2538122cced1e4d84271ebdb4c7e Mon Sep 17 00:00:00 2001
From: ypsdf1 <nihaoshidifu@gitee.com>
Date: Sun, 25 Oct 2026 17:37:21 +0800
Subject: [PATCH] =?UTF-8?q?=E7=AC=AC55=E6=89=B9=EF=BC=9Alogin=5Fverified?=
 =?UTF-8?q?=3D0=E6=97=B6=E6=B8=85=E9=99=A4web=5Flogin=5Fverified=E6=97=A7?=
 =?UTF-8?q?=E8=AE=B0=E5=BD=95=EF=BC=8C=E9=98=B2=E6=AD=A2=E6=AE=8B=E7=95=99?=
 =?UTF-8?q?=E5=AF=BC=E8=87=B4Web=E7=AB=AF=E8=AF=AF=E6=94=BE=E8=A1=8C?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 api/sync.php | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/api/sync.php b/api/sync.php
index bd4a211..138fedf 100644
--- a/api/sync.php
+++ b/api/sync.php
@@ -2961,6 +2961,14 @@ function pushPlayerLoginStatus() {
         $verifiedStmt->execute();
         @error_log("[pushPlayerLoginStatus] 写入web_login_verified: player=$player (Java已验证)");
     }
+    // ★ login_verified=0：Java标记未登录，清除旧记录防止Web端误放行
+    else {
+        $db->exec("CREATE TABLE IF NOT EXISTS web_login_verified (player_name TEXT PRIMARY KEY, verified_at INTEGER NOT NULL)");
+        $delStmt = $db->prepare("DELETE FROM web_login_verified WHERE player_name = :player");
+        $delStmt->bindValue(':player', $player, SQLITE3_TEXT);
+        $delStmt->execute();
+        @error_log("[pushPlayerLoginStatus] 清除web_login_verified: player=$player (Java未登录)");
+    }
 
     // 2. 如果玩家在游戏中已登录，更新online_players表（只更新已存在的记录，不凭空插入）
     if ($isOnline) {