fix(captcha): seal comment fallback and phone-register client loop

Gate preprocess_comment so native wp-comments-post cannot bypass captcha,
require verify+reset on phone register, and align UsersSignin status with
active provider.
This commit is contained in:
2026-07-13 20:35:09 +08:00
parent 02f77b756c
commit fa1ab52b8b
4 changed files with 66 additions and 33 deletions
+2 -2
View File
@@ -249,8 +249,8 @@ async function load() {
form.invite_register_field = authData.invite_register_field || 'optional'
form.invite_reject_invalid = authData.invite_reject_invalid !== false
captchaSummary.register = !!captchaData.enabled && !disabledScenarios.includes('register')
captchaSummary.signin = !!captchaData.enabled && !disabledScenarios.includes('signin')
captchaSummary.register = !!captchaData.enabled && !!captchaData.active_provider && !disabledScenarios.includes('register')
captchaSummary.signin = !!captchaData.enabled && !!captchaData.active_provider && !disabledScenarios.includes('signin')
} catch (error) {
message.error(error.message || '加载签到奖励配置失败')
} finally {