fix 避免通过相同txt记录关联域名所有人身份

避免通过相同txt记录关联域名所有人身份
Netrvin · Feb 9, 2021 · 91444a3 · 91444a3
1 parent 3d43400
commit 91444a3
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/auth.php b/auth.php
@@ -24,7 +24,7 @@ function msg($s)
     if ($r["result"] == "success") {
         $_SESSION["user_key"] = $r["response"]["user_key"];
         $_SESSION["email"] = $r["response"]["cloudflare_email"];
-        if (Enable_TXT_Verification) $_SESSION["txt_verification"] = password_hash(Random_String.$_SESSION["email"],PASSWORD_BCRYPT );
+        //if (Enable_TXT_Verification) $_SESSION["txt_verification"] = password_hash(Random_String.$_SESSION["email"],PASSWORD_BCRYPT );
         header("Location: domains.php");
     } else {
         msg("失败：" . $r["msg"]);

diff --git a/domains.php b/domains.php
@@ -93,7 +93,7 @@ class="mdui-btn mdui-ripple mdui-shadow-4">添加域名
             </div>
             <?php if (Enable_TXT_Verification): ?>
             <p class="mdui-typo" style="text-align: center;">
-                请在此域名添加名称为 cfpmp 的 TXT 记录<code style="display: block;"><?=$_SESSION["txt_verification"]?></code>此记录可在验证完毕后删除
+                请在此域名添加名称为 cfpmp 的 TXT 记录<code style="display: block;"><?=password_hash(Random_String.$_SESSION["email"],PASSWORD_BCRYPT)?></code>此记录可在验证完毕后删除
             </p>
             <?php endif; ?>
         </div>