AS1024/itflow
1
0
Fork 0
mirror of https://github.com/itflow-org/itflow synced 2026-02-28 10:54:52 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fixed broken TOTP 2FA

Browse Source
This commit is contained in:
johnnyq
2021-12-04 17:59:40 -05:00
parent d0c0ca0a2c
commit e36739297d
2 changed files with 66 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
login.php
View File

@@ -27,14 +27,15 @@ if(isset($_POST['login'])){
$username = mysqli_real_escape_string($mysqli,$_POST['username']);
$plain_password = $_POST['password'];
$password = md5($_POST['password']);
if(!empty($token)){
$current_code = mysqli_real_escape_string($mysqli,$_POST['current_code']);
if(!empty($current_code)){
$current_code = mysqli_real_escape_string($mysqli,$_POST['current_code']);
}
$sql = mysqli_query($mysqli,"SELECT * FROM users WHERE user_email = '$username' AND user_password = '$password'");
if(mysqli_num_rows($sql) == 1){
$row = mysqli_fetch_array($sql);
$token = $row['token'];
$token = $row['user_token'];
$_SESSION['user_id'] = $row['user_id'];
$_SESSION['user_name'] = $row['user_name'];
$user_name = $row['user_name'];
@@ -61,6 +62,7 @@ if(isset($_POST['login'])){
$_SESSION['logged'] = TRUE;
mysqli_query($mysqli,"INSERT INTO logs SET log_type = 'Login 2FA', log_action = 'Success', log_description = '$ip - $os - $browser - $device', log_created_at = NOW(), log_user_id = $user_id");
//header("Location: $config_start_page");
echo "<script>alert(Fail); </script>";
header("Location: dashboard.php");
}else{
mysqli_query($mysqli,"INSERT INTO logs SET log_type = 'Login', log_action = '2FA Failed', log_description = '$ip - $os - $browser - $device', log_created_at = NOW(), log_user_id = $user_id");