update

confirm.php

@@ -28,21 +28,27 @@ $qwUserId = $_SESSION['qwUserId'];
 $qwUserName = $_SESSION['qwUserName'];
 $qwPhoneNumberIdd = $_SESSION['qwPhoneNumberIdd'];
 $qwPhoneNumber = $_SESSION['qwPhoneNumber'];
-$stage = $_SESSION['qwVerifyStage'] ?? '';
+$stage = $_SESSION['qwVerifyStage'] ?? false;
 $oldVerified = $_SESSION['oldVerified'] ?? false;
 $newVerified = $_SESSION['newVerified'] ?? false;
+session_destroy();
+
+if (!$stage) {
+	echo "请求方式错误，请重新完成验证。";
+	exit(1);
+}
 
 if ($stage === 'reg' && $oldVerified !== true) {
 	alertAndBack('验证码错误。');
 	exit(1);
-} else if ($stage === 'update' && $newVerified !== true) {
+}
+
+if ($stage === 'update' && $newVerified !== true) {
 	alertAndBack('验证码错误。');
 	exit(1);
 }
 
 if (($stage === 'reg' && $oldVerified === true) || ($stage === 'update' && $newVerified === true)) {
-	session_destroy();
-
 	// 连接数据库
 	$dsn = "$rnrsDatabaseType:host=$rnrsDatabaseServer;dbname=$rnrsDatabaseName";
 	try {

reg.php

@@ -24,7 +24,7 @@ if (!isset($_SESSION['qwUserId']) || !isset($_SESSION['qwUserName'])) {
 		<label for="stage"></label>
 		<input type="text" name="stage" id="stage" title="stage" value="reg" />
 		<p>
-		<em>您好，$qwUserName 。请输入新的实名信息。</em>
+		<em>您好，$qwUserName 。请输入实名信息。</em>
 		</p>
 		<p>
 			<em>接下来，您需要登记您的实名信息；您需要准备好手机号码以接收验证码。</em>