实现短信验证码验证时，应判断短信验证码是否已经被使用过、短信验证码是否正确、短信验证码是否超时等。

    1.     public int doControl() throws SsException {
    2.         try {
    3.             String sms_input = (String) mapValue.get("sms_yzm");
    4.             String errMsg = (String) mapValue.get("respmsg");
    6.             String sms_yzm = priDataCache.getParam("sms_yzm");
    7.             String sms_time = priDataCache.getParam("sms_yzm_time");
    8.             boolean isBeyondCount = false;
    9.             //检查是否获取到短信验证码
    10.             if (sms_yzm == null || sms_time == null || sms_time.equals("") || sms_yzm.equals("")) {
    11.                 priDataCache.setParam("respcode", "m2019");
    12.                 priDataCache.setParam("respmsg", "未获取短信验证码!");
    13.                 return -1;
    14.             }
    15.             //短信验证码超时检查
    16.             if (System.currentTimeMillis() - 180000 > Long.parseLong(sms_time)) {//三分钟
    17.                 priDataCache.setParam("respcode", "m2020");
    18.                 priDataCache.setParam("respmsg", "短信验证码已经超时，请重新获取");
    19.                 return -1;
    20.             }
    21.             //检查短信验证码是否已被使用
    22.             if (sms_input != null && sms_input.equals(sms_yzm)) {
    23.                 priDataCache.setParam("sms_yzm", "");
    24.                 priDataCache.setParam("sms_yzm_time", "");
    25.             }
    26.             //判断短信的错误尝试次数
    27.             if (sms_input != null) {
    28.                 int msgCount = iBaseDao.queryForInt("customer.countMsg", param);
    29.                 if (msgCount > 10) {
    30.                     isBeyondCount = true;
    31.                 }
    32.                 if (isBeyondCount) {
    33.                     TransUtil.buildResponseMessage(AppConstants.RspCode_FAIL, "短信验证码在一天之内不允许超过10次", rst);
    34.                     return rst;
    35.                 } else {
    36.                     priDataCache.setParam("respcode", "m2021");
    37.                     priDataCache.setParam("respmsg", errMsg);
    38.                     return -1;
    39.                 }
    40.             }catch(Exception ex){
    41.                 Log.getInstance().error(logId, ex.getMessage(), ex);
    42.                 throw new SsException("m2022", "验证码输入不正确" + ex.toString());
    43.             }
    44.             return 0;
    45.         }