paxton
/
mailcow
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fail with access denied when no Yubi api key was added

master
andryyy 2017-01-29 21:53:34 +01:00
parent 2738686eed
commit 1a33050d38
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
data/web/inc/functions.inc.php
View File

@ -1806,6 +1806,13 @@ function set_tfa($postarray) {
switch ($postarray["tfa_method"]) { switch ($postarray["tfa_method"]) {
case "yubi_otp": case "yubi_otp":
if (!$yubi) {
$_SESSION['return'] = array(
'type' => 'danger',
'msg' => sprintf($lang['danger']['access_denied'])
);
return false;
}
if (!ctype_alnum($postarray["otp_token"]) || strlen($postarray["otp_token"]) != 44) { if (!ctype_alnum($postarray["otp_token"]) || strlen($postarray["otp_token"]) != 44) {
$_SESSION['return'] = array( $_SESSION['return'] = array(
'type' => 'danger', 'type' => 'danger',