Skip to content
● Critical PHP security fixes are out: update PHP on your Grav sites. What to do →

2FA broken after update Grav v1.7.10 - Admin v1.10.9

admin

Started by Jeffrey de Waal 6 years ago · 3 replies · 925 views
6 years ago

After update Grav v1.7.10 and Admin v1.10.9 2FA is broken. I got the message incorrect wrong token. I allready delete clear the cache, try different browsers, and try in private mode. Notthing did help the got the 2FA working.

6 years ago

I'm seeing the same problem 😦

I suggest this is recorded against the login plugin, which was updated with the 1.7.10 update, at least for me, and is a more likely source of the fault.

Edit: apparently the fault has been identified in the admin.

last edited 04/07/21 by beejay41
6 years ago

The only change to the login plugin is they add an extra validation control to the password field. I see that you think the fault is in the admin plugin. Found anything?

PHP
    $password = $this->validateField('password1', $data['password'] ?? $data['password1'] ?? null);
    foreach ($data as $key => &$value) {
        $value = $this->validateField($key, $value, $key === 'password2' ? $password : '');
    }
    unset($value);

Suggested topics

Topic Participants Replies Views Activity
Support · by webmasterodp, 2 weeks ago
4 248 2 weeks ago
Support · by nwhitfield, 2 weeks ago
2 214 2 weeks ago
Support · by stell, 4 weeks ago
5 458 3 weeks ago
Support · by gravinator, 2 months ago
5 638 3 weeks ago
Support · by Gravver, 1 month ago
6 430 4 weeks ago