Files
sysPass/ajax/ajax_2fa.php
nuxsmin 0c031de9fe * [ADD] New language translation to Catalan. Thanks to @ferrergl
* [ADD] Added some user preferences like show optional actions and top navigation bar.
* [MOD] Updated German translation. Thanks to @wagnst and @ffflorian
* [MOD] Updated French translation. Thanks to jmrh, grandpas29 and julien
* [MOD] Fallback to plain passwords on forms when PKI is not available. It does not affect to the accounts.
* [FIX] Fixed language strings. Closes #147
* [FIX] Fixed master password changing issue that fails when no custom fields are defined.
* [FIX] Fixed redirection from 2FA page after login.
* [FIX] Fixed account main group saving.
2015-10-15 15:17:05 +02:00

52 lines
1.5 KiB
PHP

<?php
/**
* sysPass
*
* @author nuxsmin
* @link http://syspass.org
* @copyright 2012-2015 Rubén Domínguez nuxsmin@syspass.org
*
* This file is part of sysPass.
*
* sysPass is free software: you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation, either version 3 of the License, or
* (at your option) any later version.
*
* sysPass is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with sysPass. If not, see <http://www.gnu.org/licenses/>.
*
*/
use SP\SessionUtil;
define('APP_ROOT', '..');
require_once APP_ROOT . DIRECTORY_SEPARATOR . 'inc' . DIRECTORY_SEPARATOR . 'Base.php';
SP\Request::checkReferer('POST');
$sk = SP\Request::analyze('sk', false);
if (!$sk || !SessionUtil::checkSessionKey($sk)) {
SP\Response::printJSON(_('CONSULTA INVÁLIDA'));
}
$userId = SP\Request::analyze('itemId', 0);
$pin = SP\Request::analyze('security_pin', 0);
$twoFa = new \SP\Auth\Auth2FA($userId, $userLogin);
if($userId && $pin && $twoFa->verifyKey($pin)){
\SP\Session::set2FApassed(true);
SP\Response::printJSON(_('Código correcto'), 0, 'sysPassUtil.Common.redirect(\'index.php\')');
} else {
\SP\Session::set2FApassed(false);
SP\Response::printJSON(_('Código incorrecto'));
}