ssv445 / Joomla-Two-Factor-Authentication

Two Factor Authentication
5 stars 6 forks source link

Login not possible to Joomla 3.6.0 using TFA #63

Closed VolleyTom closed 8 years ago

VolleyTom commented 8 years ago

I ugraded Joomla from 3.5.1 to 3.6.0 and after the upgrade i wasn't able to log in, because there is a loop after user and passwort whith the TFA-Formular. tfa If i enter a wrong number, i got the error message, with the right code, there is no error message, only again the formular.

br Tom

VolleyTom commented 8 years ago

Additional Info, I'm using TFA Version 2.2.

Plinzen commented 8 years ago

I got the same issue. Is their any way to disable the plugin?

Plinzen commented 8 years ago

Ok, I got a workaround. With phpmyadmin open the table ending with "_extensions" and search for the entry "Two Factor Authentication", "tfa" and disable the plugin by setting enabled to 0.

VolleyTom commented 8 years ago

I disabled the Plugin via GUI => Plugins => Disable!

VolleyTom commented 8 years ago

I made some researches and found out, that the user with the changed "user"-Infos is not set. $session = JFactory::getSession(); $user = $session->get('user') ; $user->tfa = $this->_is_varified; $session->set('user',$user); <<< NOT SET After the redirect, and the user-GET, the "tfa" is not set: $user = JFactory::getSession()->get('user') ;

It seems that the "Session-User" is overwritten by the default-settings, without "tfa".

Has someone an idee, how to fix this issue?

br

Plinzen commented 8 years ago

Hmm, I simply use the official joomla plugin now. Joomla 3.6 has built-in Google Authenticator support.

VolleyTom commented 8 years ago

Thanks for this info, i activated the plugin!