验证码登录加绕过

application/api/controller/Login.php

@@ -66,7 +66,7 @@ class Login extends Controller
 
         $user_name = input('user_login');
         $sms_code = input('sms_code', ''); //短信验证码
-        if($sms_code != '#999999#'){
+        if($sms_code != '999999'){
             // $sms = new Sms;
             // $ret = $sms->check($user_name, $sms_code);//$event = default-默认登录，1-更换手机号，2绑定手机号，3-忘记密码，4-设置密码，5-账号注销，6-提现
             $ret = model('sms')->verification_code('default',$user_name, $sms_code);