| Author |
|
solkmaaker
Senior Member
Joined: 28 June 2020
Online Status: Offline
Posts: 163
|
| Posted: 26 April 2024 at 1:13pm | IP Logged
|
|
|
You are sending all 2FA data (including secret) to google when you are using google QR code generator (which does not work any more)?
|
| Back to Top |
|
| |
Igor
AfterLogic Support
Joined: 24 June 2008
Location: United States
Online Status: Offline
Posts: 6104
|
| Posted: 27 April 2024 at 12:16am | IP Logged
|
|
|
We did indeed, in the new version this won't be happening. The new version is now being thoroughly tested, and will be released once the testing is done. Thank you.
--
Regards,
Igor, Afterlogic Support
|
| Back to Top |
|
| |
solkmaaker
Senior Member
Joined: 28 June 2020
Online Status: Offline
Posts: 163
|
| Posted: 27 April 2024 at 1:37am | IP Logged
|
|
|
For those who want to get it working until improved version is available:
Replace line:
Code:
| return 'https://chart.googleapis.com/chart?chs='.$width.'x'.$height.'&chld='.$level.'|0&cht=qr&chl='.$urlencoded.'';* |
|
|
With:
Code:
| return 'https://api.qrserver.com/v1/create-qr-code/?data='.$urlencoded.'&size='.$width.'x'.$height.''; |
|
|
in file: /vendor/afterlogic/googleauthenticator/PHPGangsta/GoogleAuthenticator.php
This is not good solution, since it just sends data to another provider.
Use it at your own risk.
Igor, is the new version going to minor or major version of product?
|
| Back to Top |
|
| |
Igor
AfterLogic Support
Joined: 24 June 2008
Location: United States
Online Status: Offline
Posts: 6104
|
| Posted: 27 April 2024 at 1:39am | IP Logged
|
|
|
I believe this is going to be 9.7.8 but it still may change.
And thank you for the fix!
--
Regards,
Igor, Afterlogic Support
|
| Back to Top |
|
| |
MailBee.NET Objects 
MailBee.NET Queue 
MailBee Objects 
WebMail Pro PHP 
AfterLogic Aurora 
MailSuite Pro for Linux 
Unified Messaging Solution 
Search
Register
Login
Topic: 2FA security issue
Privacy policy |
Refund policy