Fail with access denied when no Yubi api key was added

2017-01-29 21:53:34 +01:00 · 2017-01-29 21:53:34 +01:00 · 1a33050d38
parent 2738686eed
commit 1a33050d38
1 changed files with 7 additions and 0 deletions
--- a/data/web/inc/functions.inc.php
+++ b/data/web/inc/functions.inc.php
@ -1806,6 +1806,13 @@ function set_tfa($postarray) {
  
 	switch ($postarray["tfa_method"]) {
 		case "yubi_otp":
+      if (!$yubi) {
+        $_SESSION['return'] = array(
+          'type' => 'danger',
+          'msg' => sprintf($lang['danger']['access_denied'])
+        );
+        return false;
+      }
 			if (!ctype_alnum($postarray["otp_token"]) || strlen($postarray["otp_token"]) != 44) {
 				$_SESSION['return'] = array(
 					'type' => 'danger',