Implement 2FA in Admin and User Backend.

Author: ScIT-Raphael

web/edit/user/index.php

@@ -36,6 +36,8 @@
 $v_fname = $data[$v_username]['FNAME'];
 $v_lname = $data[$v_username]['LNAME'];
 $v_shell = $data[$v_username]['SHELL'];
+$v_twofa = $data[$v_username]['TWOFA'];
+$v_qrcode = $data[$v_username]['QRCODE'];
 $v_ns = $data[$v_username]['NS'];
 $nameservers = explode(",", $v_ns);
 $v_ns1 = $nameservers[0];
@@ -95,6 +97,32 @@
         $v_password = escapeshellarg($_POST['v_password']);
     }
 
+    // Enable twofa
+    if ((!empty($_POST['v_twofa'])) && (empty($_SESSION['error_msg']))) {
+        exec (HESTIA_CMD."v-add-user-2fa ".escapeshellarg($v_username), $output, $return_var);
+        check_return_code($return_var,$output);
+        unset($output);
+        
+        // List user
+        exec (HESTIA_CMD."v-list-user ".escapeshellarg($v_username)." json", $output, $return_var);
+        check_return_code($return_var,$output);
+        $data = json_decode(implode('', $output), true);
+        unset($output);
+
+        // Parse user twofa
+        $v_twofa = $data[$v_username]['TWOFA'];
+        $v_qrcode = $data[$v_username]['QRCODE'];
+    }
+
+    // Disable twofa
+    if ((empty($_POST['v_twofa'])) && (!empty($v_twofa)) && (empty($_SESSION['error_msg']))) {
+        exec (HESTIA_CMD."v-delete-user-2fa ".escapeshellarg($v_username), $output, $return_var);
+        check_return_code($return_var,$output);
+        unset($output);
+        $v_twofa = '';
+        $v_qrcode = '';
+    }
+
     // Change package (admin only)
     if (($v_package != $_POST['v_package']) && ($_SESSION['user'] == 'admin') && (empty($_SESSION['error_msg']))) {
         $v_package = escapeshellarg($_POST['v_package']);
@@ -188,4 +216,4 @@
 
 // Flush session messages
 unset($_SESSION['error_msg']);
-unset($_SESSION['ok_msg']);
+unset($_SESSION['ok_msg']);

web/templates/admin/edit_user.html

@@ -67,6 +67,20 @@
                                     <input type="text" size="20" class="vst-input password" name="v_password" value="<?=htmlentities(trim($v_password, "'"))?>">
                                 </td>
                             </tr>
+                            <tr>
+                                <td class="vst-text input-label">
+                                    <?php print __('2 Factor Authentication');?>
+                                </td>
+                            </tr>
+                            <tr>
+                                <td>
+                                    <label><input type="checkbox" class="vst-checkbox" name="v_twofa" <?php if($v_twofa == 'yes') echo "checked=yes" ?> onclick="App.Actions.WEB.toggle_twofa(this)"> <?php print __('Enable 2FA');?></label>
+                                    <?php if($v_twofa == 'yes') { ?>
+                                    <p><?php echo __('Please scan the code below in your 2FA application:'); ?></p>
+                                    <img src="<?php echo $v_qrcode; ?>">
+                                    <?php } ?>
+                                </td>
+                            </tr>
                             <tr>
                                 <td class="vst-text input-label">
                                     <?php print __('Email');?>

web/templates/user/edit_user.html

@@ -62,6 +62,21 @@
                                     <?php print __('Password');?> / <a href="javascript:randomString();" class="generate"><?php print __('generate');?></a>
                                 </td>
                             </tr>
+                            </tr>
+                            <tr>
+                                <td class="vst-text input-label">
+                                    <?php print __('2 Factor Authentication');?>
+                                </td>
+                            </tr>
+                            <tr>
+                                <td>
+                                    <label><input type="checkbox" class="vst-checkbox" name="v_twofa" <?php if($v_twofa == 'yes') echo "checked=yes" ?> onclick="App.Actions.WEB.toggle_twofa(this)"> <?php print __('Enable 2FA');?></label>
+                                    <?php if($v_twofa == 'yes') { ?>
+                                    <p><?php echo __('Please scan the code below in your 2FA application:'); ?></p>
+                                    <img src="<?php echo $v_qrcode; ?>">
+                                    <?php } ?>
+                                </td>
+                            </tr>
                             <tr>
                                 <td>
                                     <input type="text" size="20" class="vst-input password" name="v_password" value="<?=htmlentities(trim($v_password, "'"))?>">