Update: 2026-06-23 18:36:09

backend/auth/otp/providers.php

@@ -172,7 +172,7 @@ function sendNabehOtp(string $receiver, string $otp, string $method = 'text'): b
  * @param string $method whatsapp | sms | voice | flash_call
  * @return bool True if OTP was sent successfully
  */
-function sendIntaleqOtp(string $receiver, string $otp, string $method = 'whatsapp'): bool {
+function sendIntaleqOtp(string $receiver, string &$otp, string $method = 'whatsapp'): bool {
     $appKey = getenv('NABEH_OTP_APP_KEY');
     
     if (!$appKey) {
@@ -186,10 +186,7 @@ function sendIntaleqOtp(string $receiver, string $otp, string $method = 'whatsap
     $apiUrl = 'https://otp.intaleqapp.com/api/request-otp.php';
     $payload = [
         'phone' => $phoneWithPlus,
-        'app_key' => $appKey,
+        'app_key' => $appKey
-        'device_type' => 'android',
-        'method' => $method,
-        'code' => $otp
     ];
 
     $response = curlCall("POST", $apiUrl, json_encode($payload), [
@@ -199,6 +196,9 @@ function sendIntaleqOtp(string $receiver, string $otp, string $method = 'whatsap
     if ($response) {
         $decoded = json_decode($response, true);
         if ($decoded && ($decoded['success'] ?? false)) {
+            if (isset($decoded['otp'])) {
+                $otp = (string)$decoded['otp'];
+            }
             return true;
         }
         $msg = "❌ [Intaleq OTP] API returned failure response: " . $response;

backend/core/Auth/RateLimiter.php

@@ -44,6 +44,11 @@ class RateLimiter
             $this->redis->expire($key, $window);
         }
 
+        // Disable limit for register during debugging
+        if ($type === 'register') {
+            return true;
+        }
+
         return $current <= $max;
     }