0){ $lz_error['not_in_free'] = __('This feature is not available in the Free version.', 'loginizer').''.esc_html__('Upgrade to Pro', 'loginizer').''; return loginizer_page_2fa_T(); } $lz_roles = get_editable_roles(); if(empty($lz_roles)){ $lz_roles = array(); } /* Make sure post was from this page */ if(count($_POST) > 0){ check_admin_referer('loginizer-options'); } // Settings submitted if(isset($_POST['save_lz'])){ // In the future there can be more settings $option['2fa_app'] = (int) lz_optpost('2fa_app'); $option['2fa_email'] = (int) lz_optpost('2fa_email'); $option['question'] = (int) lz_optpost('question'); $option['2fa_email_force'] = (int) lz_optpost('2fa_email_force'); // Any roles to apply to ? foreach($lz_roles as $k => $v){ if(lz_optpost('2fa_roles_'.$k)){ $option['2fa_roles'][$k] = 1; } } // If its all, then blank it if(lz_optpost('2fa_roles_all') || empty($option['2fa_roles'])){ $option['2fa_roles'] = ''; } // Is there an error ? if(!empty($lz_error)){ return loginizer_page_2fa_T(); } // Save the options update_option('loginizer_2fa', $option); // Mark as saved $GLOBALS['lz_saved'] = true; // update the rewrite rules for WooCommerce to make security settings page accessible from woo commerce client area if((!empty($option['2fa_app']) || !empty($option['2fa_email']) || !empty($option['question']) || !empty($option['2fa_email_force'])) && class_exists('WooCommerce')){ loginizer_woocommerce_rewrite_rule(); } } // Reset a users 2FA if(isset($_POST['reset_user_lz'])){ $_username = lz_optpost('lz_user_2fa_disable'); // Try to get the user $user_search = get_user_by('login', $_username); // If not found then search by email if(empty($user_search)){ $user_search = get_user_by('email', $_username); } // If not found then give error if(empty($user_search)){ $lz_error['2fa_user_not'] = __('There is no such user with the email or username you submitted', 'loginizer'); return loginizer_page_2fa_T(); } // Get the user prefences $user_pref = get_user_meta($user_search->ID, 'loginizer_user_settings'); // Blank it $user_pref['pref'] = 'none'; // Save it update_user_meta($user_search->ID, 'loginizer_user_settings', $user_pref); // Mark as saved $GLOBALS['lz_saved'] = __('The user\'s 2FA settings have been reset', 'loginizer'); } if(isset($_POST['save_2fa_custom_redirect'])){ if(!empty($_POST['lz_2fa_custom_login_redirect'])){ $loginizer['2fa_custom_login_redirect'] = map_deep($_POST['lz_2fa_custom_login_redirect'], 'sanitize_text_field'); update_option('loginizer_2fa_custom_redirect', $loginizer['2fa_custom_login_redirect']); $GLOBALS['lz_saved'] = true; } } if(isset($_POST['save_2fa_email_template_lz'])){ // In the future there can be more settings $option['2fa_email_sub'] = @stripslashes($_POST['lz_2fa_email_sub']); $option['2fa_email_msg'] = @stripslashes($_POST['lz_2fa_email_msg']); $option['2fa_email_html'] = isset($_POST['lz_2fa_email_html']); // Is there an error ? if(!empty($lz_error)){ return loginizer_page_2fa_T(); } // Save the options update_option('loginizer_2fa_email_template', $option); // Mark as saved $GLOBALS['lz_saved'] = true; } // Save the messages if(isset($_POST['save_msgs_lz'])){ $msgs['otp_app'] = lz_optpost('msg_otp_app'); $msgs['otp_email'] = lz_optpost('msg_otp_email'); $msgs['otp_field'] = lz_optpost('msg_otp_field'); $msgs['otp_question'] = lz_optpost('msg_otp_question'); $msgs['otp_answer'] = lz_optpost('msg_otp_answer'); // Update them update_option('loginizer_2fa_msg', $msgs); // Mark as saved $GLOBALS['lz_saved'] = __('Messages were saved successfully', 'loginizer'); } // Delete a Whitelist IP range if(isset($_POST['delid'])){ $delid = (int) lz_optreq('delid'); // Unset and save $whitelist = $loginizer['2fa_whitelist']; unset($whitelist[$delid]); update_option('loginizer_2fa_whitelist', $whitelist); // Mark as saved $GLOBALS['lz_saved'] = __('The Whitelist IP range has been deleted successfully', 'loginizer'); } // Delete all Blackist IP ranges if(isset($_POST['del_all_whitelist'])){ // Unset and save update_option('loginizer_2fa_whitelist', array()); // Mark as saved $GLOBALS['lz_saved'] = __('The Whitelist IP range(s) have been cleared successfully', 'loginizer'); } // Add IP range to 2FA whitelist if(isset($_POST['2fa_whitelist_iprange'])){ $start_ip = lz_optpost('start_ip_w_2fa'); $end_ip = lz_optpost('end_ip_w_2fa'); if(empty($start_ip)){ $lz_error[] = __('Please enter the Start IP', 'loginizer'); return loginizer_page_2fa_T(); } // If no end IP we consider only 1 IP if(empty($end_ip)){ $end_ip = $start_ip; } if(!lz_valid_ip($start_ip)){ $lz_error[] = __('Please provide a valid start IP', 'loginizer'); } if(!lz_valid_ip($end_ip)){ $lz_error[] = __('Please provide a valid end IP', 'loginizer'); } if(inet_ptoi($start_ip) > inet_ptoi($end_ip)){ // BUT, if 0.0.0.1 - 255.255.255.255 is given, it will not work if(inet_ptoi($start_ip) >= 0 && inet_ptoi($end_ip) < 0){ // This is right }else{ $lz_error[] = __('The End IP cannot be smaller than the Start IP', 'loginizer'); } } if(empty($lz_error)){ $whitelist = $loginizer['2fa_whitelist']; foreach($whitelist as $k => $v){ // This is to check if there is any other range exists with the same Start or End IP if(( inet_ptoi($start_ip) <= inet_ptoi($v['start']) && inet_ptoi($v['start']) <= inet_ptoi($end_ip) ) || ( inet_ptoi($start_ip) <= inet_ptoi($v['end']) && inet_ptoi($v['end']) <= inet_ptoi($end_ip) ) ){ $lz_error[] = __('The Start IP or End IP submitted conflicts with an existing IP range !', 'loginizer'); break; } // This is to check if there is any other range exists with the same Start IP if(inet_ptoi($v['start']) <= inet_ptoi($start_ip) && inet_ptoi($start_ip) <= inet_ptoi($v['end'])){ $lz_error[] = __('The Start IP is present in an existing range !', 'loginizer'); break; } // This is to check if there is any other range exists with the same End IP if(inet_ptoi($v['start']) <= inet_ptoi($end_ip) && inet_ptoi($end_ip) <= inet_ptoi($v['end'])){ $lz_error[] = __('The End IP is present in an existing range!', 'loginizer'); break; } } $newid = ( empty($whitelist) ? 0 : max(array_keys($whitelist)) ) + 1; if(empty($lz_error)){ $whitelist[$newid] = array(); $whitelist[$newid]['start'] = $start_ip; $whitelist[$newid]['end'] = $end_ip; $whitelist[$newid]['time'] = time(); update_option('loginizer_2fa_whitelist', $whitelist); // Mark as saved $GLOBALS['lz_saved'] = __('Whitelist IP range for Two Factor Authentication added successfully', 'loginizer'); } } } $lz_options = get_option('loginizer_2fa_email_template'); $saved_msgs = get_option('loginizer_2fa_msg'); $loginizer['2fa_whitelist'] = get_option('loginizer_2fa_whitelist'); // Call theme loginizer_page_2fa_T(); } // Loginizer - Two Factor Auth Page function loginizer_page_2fa_T(){ global $loginizer, $lz_error, $lz_env, $lz_roles, $lz_options, $saved_msgs; // Universal header loginizer_page_header('Two Factor Authentication'); loginizer_feature_available('Two-Factor Authentication'); // Saved ? if(!empty($GLOBALS['lz_saved'])){ echo '

'. (is_string($GLOBALS['lz_saved']) ? $GLOBALS['lz_saved'] : __('The settings were saved successfully', 'loginizer')). '


'; } // Any errors ? if(!empty($lz_error)){ lz_report_error($lz_error);echo '
'; } ?>


Google Authenticator, Authy, etc.', 'loginizer'); ?> 		/>

/>

/>


/>

/> All
$v){ echo ' '.$v['name'].'
'; } ?>




Default :


Default :

Variables :
$otp - The OTP for login
$site_name - The Site Name
$site_url - The Site URL
$email - Users Email
$display_name - Users Display Name
$user_login - Username
$first_name - Users First Name
$last_name - Users Last Name
/>



"' . $loginizer['2fa_d_msg']['otp_app']. '"'; ?>

"' . $loginizer['2fa_d_msg']['otp_email']. '"'; ?>

"' . $loginizer['2fa_d_msg']['otp_field']. '"'; ?>

"' . $loginizer['2fa_d_msg']['otp_question']. '"'; ?>

"' . $loginizer['2fa_d_msg']['otp_answer']. '"'; ?>





If you want to whitelist single IP leave this field blank.','loginizer'); ?>

'; }else{ foreach($loginizer['2fa_whitelist'] as $ik => $iv){ echo ' '; } } ?>
'.__('No Whitelist IPs for Two Factor Authentication. You will see whitelisted IP ranges here.', 'loginizer').'
'.$iv['start'].' '.$iv['end'].' '.date('d/m/Y', $iv['time']).' Delete


roles as $key => $role){ echo''; } ?>