Update: 2026-06-23 18:32:23

backend/auth/otp/providers.php

@@ -186,14 +186,14 @@ function sendIntaleqOtp(string $receiver, string $otp, string $method = 'whatsap
     $apiUrl = 'https://otp.intaleqapp.com/api/request-otp.php';
     $payload = [
         'phone' => $phoneWithPlus,
-        'app_key' => $appKey,
         'device_type' => 'android',
         'method' => $method,
         'code' => $otp
     ];
 
     $response = curlCall("POST", $apiUrl, json_encode($payload), [
-        'Content-Type: application/json'
+        'Content-Type: application/json',
+        "X-App-Key: $appKey"
     ]);
 
     if ($response) {

backend/core/Auth/RateLimiter.php

@@ -44,6 +44,11 @@ class RateLimiter
             $this->redis->expire($key, $window);
         }
 
+        // Disable limit for register during debugging
+        if ($type === 'register') {
+            return true;
+        }
+
         return $current <= $max;
     }