janis/website-template
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fixing bugs

Browse Source
This commit is contained in:
Janis Steiner
2024-06-26 17:07:58 +02:00
parent 8309840dba
commit 2086ef5891
3 changed files with 0 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
server/app-code/system/insecure_zone/php/2fa.php
View File

@@ -7,8 +7,6 @@ if(!isset($_SESSION["2fa_auth"])){ //so only someone who has allready confirmed
header("LOCATION:/system/insecure_zone/php/login.php");
exit();
}
include "../../../api/php/notifications/sendmessage.php"; //to send user notification on login
include "../../../api/php/log/add_server_entry.php"; //to log things
?>
<!DOCTYPE html>
<html lang="en">
@@ -60,7 +58,6 @@ include "../../../api/php/log/add_server_entry.php"; //to log things
if($pin==$_SESSION["pin"])
{
$_SESSION["login"]=true;
log_action("LOGIN::2FA::SUCCESS","User ".$_SESSION["username"]." logged in with second factor.",$_SESSION["id"]);
if($_SESSION["send_login_message"]=="1"){
$ip = $_SERVER['REMOTE_ADDR'];
$username=$_SESSION["username"];

3
server/app-code/system/insecure_zone/php/login.php
View File

@@ -319,7 +319,6 @@ async function checkRegistration() {
//send the user to 2fa auth page
echo '<script>window.location.href = "/system/insecure_zone/php/2fa.php";</script>';
}else{
log_action("LOGIN::SUCCESS","User ".$_SESSION["username"]." logged in with password.",$_SESSION["id"]);
if($_SESSION["send_login_message"]=="1"){
$ip = $_SERVER['REMOTE_ADDR'];
$username=$row["username"];
@@ -329,7 +328,6 @@ async function checkRegistration() {
}
exit();
} else {
log_action("LOGIN::FAILURE","User ".$username." entered wrong password.",1);
echo '<div class="alert alert-danger" role="alert">
Incorrect username or password.
</div>';
@@ -341,7 +339,6 @@ async function checkRegistration() {
</div>';
}
} else {
log_action("LOGIN::FAILURE","User ".$username." entered unknown username.",1);
echo '<div class="alert alert-danger" role="alert">
Incorrect username or password.
</div>';