mirror of
https://github.com/itflow-org/itflow
synced 2026-11-11 15:07:24 +00:00
47 lines
2.4 KiB
PHP
47 lines
2.4 KiB
PHP
<?php
|
|
|
|
/*
|
|
* Incident response - when an agent's account may be in someone else's
|
|
* hands: every other agent gets a new password, shown once on the next page,
|
|
* and their remembered browsers are forgotten so MFA is asked for again.
|
|
*/
|
|
|
|
require_once '../../includes/modal_header.php';
|
|
|
|
$agent_count = intval(mysqli_fetch_row(mysqli_query($mysqli, "SELECT COUNT(*) FROM users WHERE user_type = 1 AND user_archived_at IS NULL AND user_id <> " . intval($session_user_id)))[0]);
|
|
|
|
ob_start();
|
|
|
|
?>
|
|
<div class="modal-header bg-danger">
|
|
<h5 class="modal-title text-white"><i class="fas fa-fw fa-skull-crossbones me-2"></i>Incident response</h5>
|
|
<button type="button" class="btn-close btn-close-white" data-bs-dismiss="modal"></button>
|
|
</div>
|
|
<form action="post.php" method="post" autocomplete="off">
|
|
<input type="hidden" name="csrf_token" value="<?= $_SESSION['csrf_token'] ?>">
|
|
|
|
<div class="modal-body">
|
|
<p class="fw-semibold mb-2">Reset the password of every other agent - <?= $agent_count ?> of them.</p>
|
|
<ul class="small mb-3 ps-3">
|
|
<li>Each gets a new password, shown to you once on the next page - give them out by phone, not email, and have them changed.</li>
|
|
<li>Their remembered browsers are forgotten, so anyone with MFA is asked for a code again.</li>
|
|
<li>Not yours - change your own first, from your account.</li>
|
|
<li>Client portal logins are left alone.</li>
|
|
</ul>
|
|
|
|
<label class="form-label">Your password <strong class="text-danger">*</strong></label>
|
|
<div class="input-group">
|
|
<span class="input-group-text"><i class="fas fa-fw fa-lock"></i></span>
|
|
<input type="password" class="form-control" data-toggle="password" name="admin_password" placeholder="To confirm it's you" autocomplete="current-password" required autofocus>
|
|
<span class="input-group-text"><i class="fa fa-fw fa-eye"></i></span>
|
|
</div>
|
|
</div>
|
|
<div class="modal-footer">
|
|
<button type="submit" name="ir_reset_user_password" class="btn btn-danger text-bold" <?= $agent_count ? '' : 'disabled' ?>><i class="fas fa-key me-2"></i>Reset <?= $agent_count ?> password<?= $agent_count === 1 ? '' : 's' ?></button>
|
|
<button type="button" class="btn btn-light" data-bs-dismiss="modal"><i class="fas fa-times me-2"></i>Cancel</button>
|
|
</div>
|
|
</form>
|
|
|
|
<?php
|
|
require_once "../../../includes/modal_footer.php";
|