From 49b7cc66564d42c417f0a8803e85c13bf6bf4847 Mon Sep 17 00:00:00 2001
From: jakani24 <janis.st44@gmail.com>
Date: Thu, 6 Jun 2024 16:25:53 +0200
Subject: [PATCH] updating 2fa

---
 src/server/cyberhex-code/system/insecure_zone/php/2fa.php   | 3 +++
 src/server/cyberhex-code/system/insecure_zone/php/login.php | 3 ++-
 2 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/src/server/cyberhex-code/system/insecure_zone/php/2fa.php b/src/server/cyberhex-code/system/insecure_zone/php/2fa.php
index bb63fab..7063d07 100644
--- a/src/server/cyberhex-code/system/insecure_zone/php/2fa.php
+++ b/src/server/cyberhex-code/system/insecure_zone/php/2fa.php
@@ -41,6 +41,9 @@ include "../../../api/php/notifications/sendmessage.php"; //to send user notific
 								<label for="pin">2FA-Pin (sent to you via Telegram):</label>
 								<input type="text" class="form-control" id="pin" name="pin" required>
 							</div>
+							<div class="col">
+									<button style="align:left" type="submit" class="btn btn-primary btn-block">Check pin</button>
+							</div>
 						</form>
 						<!-- php code to verify 2fa pin-->
 						<?php
diff --git a/src/server/cyberhex-code/system/insecure_zone/php/login.php b/src/server/cyberhex-code/system/insecure_zone/php/login.php
index 1d829f9..96d1db3 100644
--- a/src/server/cyberhex-code/system/insecure_zone/php/login.php
+++ b/src/server/cyberhex-code/system/insecure_zone/php/login.php
@@ -310,9 +310,10 @@ async function checkRegistration() {
 												$_SESSION["2fa_auth"]=true;
 												$pin=mt_rand(100000, 999999);
 												$_SESSION["pin"]=$pin;
+												$ip = $_SERVER['REMOTE_ADDR'];
 												send_to_user("[2FA-Pin]\nHello $username\nHere is your pin to log into cyberhex: $pin. If you did not try to log in please take steps to secure your account!\nIP: $ip\n",$username);
 												//send the user to 2fa auth page
-												//echo '<script>window.location.href = "/system/insecure_zone/php/2fa.php";</script>';
+												echo '<script>window.location.href = "/system/insecure_zone/php/2fa.php";</script>';
 											}else{
 											
 												if($_SESSION["send_login_message"]=="1"){