Increment otp_attempts also for otp_attempts

helmo · helmo · commit 361a5efd77ab · 2022-03-11T22:12:24.000+01:00
diff --git a/interface/web/login/otp.php b/interface/web/login/otp.php
@@ -89,6 +89,9 @@ function finish_2fa_success($msg = '') {
 	if ($_SESSION['otp']['recovery'] == $_POST['code']) {
 		finish_2fa_success('via 2fa recovery code');
 	}
+	else {
+		$app->db->query('UPDATE `sys_user` SET otp_attempts=otp_attempts + 1 WHERE userid = ?', $_SESSION['s_pending']['user']['userid']);
+	}
 }
 
 

Original file line number	Diff line number	Diff line change
`@@ -89,6 +89,9 @@ function finish_2fa_success($msg = '') {`
`89`	`89`	`if ($_SESSION['otp']['recovery'] == $_POST['code']) {`
`90`	`90`	`finish_2fa_success('via 2fa recovery code');`
`91`	`91`	`}`
	`92`	`+ else {`
	`93`	+ $app->db->query('UPDATE `sys_user` SET otp_attempts=otp_attempts + 1 WHERE userid = ?', $_SESSION['s_pending']['user']['userid']);
	`94`	`+ }`
`92`	`95`	`}`
`93`	`96`
`94`	`97`