Verification of SMS verification of a Wi-Fi hotspot can be bypassed if the design is inappropriate

The mobile phone number is required to receive the verification code for haidcube hotspot authentication. However, this verification code is leaked due to design problems. You only need to open the developer mode of the browser and click get verification code to view the JSON returned by the server in the network interaction, which includes the verification code, and the mobile phone number can complete the verification at will.

The verification code in the received JSON is redirected normally.Solution:Encrypted or stored in the session after the verification code is sent, rather than sent to the client.