From 6d63f4554cb26034053d8c8ee50481c08ad4b770 Mon Sep 17 00:00:00 2001
From: Paul Chen <chenpaul@gmail.com>
Date: Wed, 3 Dec 2008 18:58:25 +0000
Subject: [PATCH] anti otp phishing

---
 verifyOTP.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/verifyOTP.php b/verifyOTP.php
index 5497a96..aa80213 100644
--- a/verifyOTP.php
+++ b/verifyOTP.php
@@ -156,7 +156,7 @@ if ($scDiff == 0) { // Same use session, check time stamp diff
 		$elapsed = time() - $lastTime;
 		debug('Elapsed time from last validation: ' . $elapsed . ' secs');
 		$deviation = abs($elapsed - $tsDelta);
-		$percent = truncate($deviation/$elapsed, 8) . '%';
+		$percent = truncate(100*$deviation/$elapsed, 8) . '%';
 		debug("Key time deviation vs. elapsed time=".$deviation.' secs ('.
 			$percent.')');
 		if ($deviation > TS_TOLERANCE * $elapsed) {