Deploy: 2026-05-23 18:23:34

2026-05-23 18:23:34 +03:00
parent ffe04146f5
commit 354e60a99e
2 changed files with 4 additions and 4 deletions
--- a/backend/api/request-otp.php
+++ b/backend/api/request-otp.php
@@ -97,8 +97,8 @@ if (!$rateLimit->checkIp($clientIp, 'request-otp', 30, 60)) {
    exit;
 }

-// Generate 3-digit OTP (cryptographically secure)
-$otpCode = str_pad((string) random_int(0, 999), 3, '0', STR_PAD_LEFT);
+// Generate 3-digit OTP (cryptographically secure, always between 100 and 999)
+$otpCode = (string) random_int(100, 999);

 // Determine delivery method
 $method = 'flash_call'; // Default fallback