fix 2fa code verification if method==email altogether

Signed-off-by: Michael Kaufmann <[email protected]>
froxlor · Nov 8, 2023 · d4a940b · d4a940b
1 parent 0dd20bc
commit d4a940b
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/index.php b/index.php
@@ -327,11 +327,12 @@
 			if ($userinfo['type_2fa'] == 1) {
 				// generate code
 				$tfa = new FroxlorTwoFactorAuth('Froxlor ' . Settings::Get('system.hostname'));
-				$code = $tfa->getCode($tfa->createSecret());
+				$secret = $tfa->createSecret();
+				$code = $tfa->getCode($secret);
 				// set code for user
 				$stmt = Database::prepare("UPDATE $table SET `data_2fa` = :d2fa WHERE `$uid` = :uid");
 				Database::pexecute($stmt, [
-					"d2fa" => $code,
+					"d2fa" => $secret,
 					"uid" => $userinfo[$uid]
 				]);
 				// build up & send email