解决验证码可绕过安全问题

2021-08-25 21:17:16 +08:00
parent 110a5faaff
commit a255c746d4
1 changed files with 1 additions and 0 deletions
@@ -40,6 +40,7 @@ def login_post():
    if not username or not password or not code:
        return fail_api(msg="用户名或密码没有输入")
    s_code = session.get("code", None)
+    session["code"] = None

    if not all([code, s_code]):
        return fail_api(msg="参数错误")