Ensure error message is shown if 2FA token is invalid

Kristan Kenney · Kristan Kenney · commit ba6c51b84923 · 2020-07-14T01:45:54.000-03:00
diff --git a/web/login/index.php b/web/login/index.php
@@ -107,9 +107,9 @@ function authenticate_user(){
                         unset($output);
                         if ( $return_var > 0 ) {
                             sleep(2);
-                            unset($_POST['twofa']);
                             $error = "<a class=\"error\">".__('Invalid or missing 2FA token')."</a>";
                             return $error;
+                            unset($_POST['twofa']);
                         }
                    }
                 }

Original file line number	Diff line number	Diff line change
`@@ -107,9 +107,9 @@ function authenticate_user(){`
`107`	`107`	`unset($output);`
`108`	`108`	`if ( $return_var > 0 ) {`
`109`	`109`	`sleep(2);`
`110`		`- unset($_POST['twofa']);`
`111`	`110`	`$error = "<a class=\"error\">".__('Invalid or missing 2FA token')."</a>";`
`112`	`111`	`return $error;`
	`112`	`+ unset($_POST['twofa']);`
`113`	`113`	`}`
`114`	`114`	`}`
`115`	`115`	`}`