Invalid User Credentials', ); wp_send_json_success( $data ); } else { return $currentuser; } } else { if ( MOLMS_IS_ONPREM and ( ! molms_Utility::get_mo2f_db_option( 'mo2f_login_option', 'get_site_option' ) or get_site_option( 'mo2f_enable_login_with_2nd_factor' ) ) ) { $attributes = isset( $_POST['miniorange_rba_attribures'] ) ? sanitize_text_field( $_POST['miniorange_rba_attribures'] ) : null; $session_id = isset( $_POST['session_id'] ) ? sanitize_text_field( $_POST['session_id'] ) : null; $redirect_to = isset( $_REQUEST['redirect_to'] ) ? esc_url_raw( $_REQUEST['redirect_to'] ) : null; $handleSecondFactor = new Molms_Password_2Factor_Login(); if ( is_null( $session_id ) ) { $session_id = $handleSecondFactor->create_session(); } $key = get_site_option( 'mo2f_customer_token' ); $otp_token = ''; $error = $handleSecondFactor->miniorange_initiate_2nd_factor( $currentuser, $attributes, $redirect_to, $otp_token, $session_id ); } $this->miniorange_login_start_session(); $pass2fa_login_session = new Molms_Password_2Factor_Login(); $session_id = $pass2fa_login_session->create_session(); $mo2f_configured_2FA_method = $molms_db_queries->get_user_detail( 'mo2f_configured_2FA_method', $currentuser->ID ); $redirect_to = isset( $_REQUEST['redirect_to'] ) ? esc_url_raw( $_REQUEST['redirect_to'] ) : null; if ( $mo2f_configured_2FA_method ) { $mo2f_user_email = $molms_db_queries->get_user_detail( 'mo2f_user_email', $currentuser->ID ); $mo2f_user_registration_status = $molms_db_queries->get_user_detail( 'mo_2factor_user_registration_status', $currentuser->ID ); if ( $mo2f_user_email && $mo2f_user_registration_status == 'MO_2_FACTOR_PLUGIN_SETTINGS' ) { //checking if user has configured any 2nd factor method molms_2f_Utility::set_user_values( $session_id, "mo2f_login_message", 'ERROR: Login with password is disabled for you. Please Login using your phone.' ); $this->mo_auth_show_error_message(); $this->mo2f_redirectto_wp_login(); $error = new WP_Error(); return $error; } else { //if user has not configured any 2nd factor method then logged him in without asking 2nd factor $this->mo2f_verify_and_authenticate_userlogin( $currentuser, $redirect_to, $session_id ); } } else { //plugin is not activated for non-admin then logged him in $this->mo2f_verify_and_authenticate_userlogin( $currentuser, $redirect_to, $session_id ); } } } public function miniorange_login_start_session() { if ( ! session_id() || session_id() == '' || ! isset( $_SESSION ) ) { session_start(); } } public function mo_auth_show_error_message( $value = null ) { remove_filter( 'login_message', array( $this, 'mo_auth_success_message' ) ); add_filter( 'login_message', array( $this, 'mo_auth_error_message' ) ); } public function mo2f_redirectto_wp_login() { global $molms_db_queries; $pass2fa_login_session = new Molms_Password_2Factor_Login(); $session_id = isset( $_POST['session_id'] ) ? sanitize_text_field( $_POST['session_id'] ) : null; if ( is_null( $session_id ) ) { $session_id = $pass2fa_login_session->create_session(); } remove_action( 'login_enqueue_scripts', array( $this, 'mo_2_factor_hide_login' ) ); add_action( 'login_dequeue_scripts', array( $this, 'mo_2_factor_show_login' ) ); if ( get_site_option( 'mo2f_enable_login_with_2nd_factor' ) ) { molms_2f_Utility::set_user_values( $session_id, "mo_2factor_login_status", 'MO_2_FACTOR_LOGIN_WHEN_PHONELOGIN_ENABLED' ); } else { molms_2f_Utility::set_user_values( $session_id, "mo_2factor_login_status", 'MO_2_FACTOR_SHOW_USERPASS_LOGIN_FORM' ); } } public function mo2f_verify_and_authenticate_userlogin( $user, $redirect_to = null, $session_id = null ) { $user_id = $user->ID; wp_set_current_user( $user_id, $user->user_login ); $this->remove_current_activity( $session_id ); wp_set_auth_cookie( $user_id, true ); do_action( 'wp_login', $user->user_login, $user ); molms_redirect_user_to( $user, $redirect_to ); exit; } public function remove_current_activity( $session_id ) { global $molms_db_queries; $session_variables = array( 'mo2f_current_user_id', 'mo2f_1stfactor_status', 'mo_2factor_login_status', 'mo2f-login-qrCode', 'mo2f_transactionId', 'mo2f_login_message', 'mo2f_rba_status', 'mo_2_factor_kba_questions', 'mo2f_show_qr_code', 'mo2f_google_auth', 'mo2f_authy_keys' ); $cookie_variables = array( 'mo2f_current_user_id', 'mo2f_1stfactor_status', 'mo_2factor_login_status', 'mo2f-login-qrCode', 'mo2f_transactionId', 'mo2f_login_message', 'mo2f_rba_status_status', 'mo2f_rba_status_sessionUuid', 'mo2f_rba_status_decision_flag', 'kba_question1', 'kba_question2', 'mo2f_show_qr_code', 'mo2f_google_auth', 'mo2f_authy_keys' ); $temp_table_variables = array( 'session_id', 'mo2f_current_user_id', 'mo2f_login_message', 'mo2f_1stfactor_status', 'mo2f_transactionId', 'mo_2_factor_kba_questions', 'mo2f_rba_status', 'ts_created' ); molms_2f_Utility::unset_session_variables( $session_variables ); molms_2f_Utility::unset_cookie_variables( $cookie_variables ); molms_2f_Utility::unset_temp_user_details_in_table( null, $session_id, 'destroy' ); } public function custom_login_enqueue_scripts() { wp_enqueue_script( 'jquery' ); $bootstrappath = plugins_url( 'includes/css/bootstrap.min.css?version=' . MOLMS_VERSION . '', dirname( dirname( __FILE__ ) ) ); $bootstrappath = str_replace( '/handler/includes/css', '/includes/css', $bootstrappath ); wp_enqueue_style( 'bootstrap_script', $bootstrappath ); wp_enqueue_script( 'bootstrap_script', plugins_url( 'includes/js/bootstrap.min.js', dirname( dirname( __FILE__ ) ) ), array(), MOLMS_VERSION, false ); } public function mo_2_factor_hide_login() { $bootstrappath = plugins_url( 'includes/css/bootstrap.min.css?version=' . MOLMS_VERSION . '', dirname( dirname( __FILE__ ) ) ); $bootstrappath = str_replace( '/handler/includes/css', '/includes/css', $bootstrappath ); $hidepath = plugins_url( 'includes/css/hide-login-form.css?version=5.1.21', dirname( dirname( __FILE__ ) ) ); $hidepath = str_replace( '/handler/includes/css', '/includes/css', $hidepath ); wp_register_style( 'hide-login', $hidepath ); wp_register_style( 'bootstrap', $bootstrappath ); wp_enqueue_style( 'hide-login' ); wp_enqueue_style( 'bootstrap' ); } public function mo_auth_success_message() { $message = isset( $_SESSION['mo2f_login_message'] ) ? sanitize_text_field( $_SESSION['mo2f_login_message'] ) : ''; $session_id = isset( $_POST['session_id'] ) ? sanitize_text_field( $_POST['session_id'] ) : null; $message = molms_2f_Utility::mo2f_retrieve_user_temp_values( 'mo2f_login_message', $session_id ); //if the php session folder has insufficient permissions, cookies to be used if ( $message == '' ) { $message = 'Please login into your account using password.'; } return ""; } public function mo_auth_error_message() { $id = "login_error1"; //if the php session folder has insufficient permissions, cookies to be used $session_id = isset( $_POST['session_id'] ) ? sanitize_text_field( $_POST['session_id'] ) : null; $message = molms_2f_Utility::mo2f_retrieve_user_temp_values( 'mo2f_login_message', $session_id ); //if the php session folder has insufficient permissions, cookies to be used if ( $message == '' ) { $message = 'Invalid Username'; } if ( get_site_option( 'mo_lms_activate_recaptcha_for_login' ) ) { //test $message = 'Invalid Username or recaptcha'; } return ""; } public function mo_auth_show_success_message() { remove_filter( 'login_message', array( $this, 'mo_auth_error_message' ) ); add_filter( 'login_message', array( $this, 'mo_auth_success_message' ) ); } public function miniorange_login_form_fields( $mo2fa_login_status = null, $mo2fa_login_message = null ) { global $molms_db_queries; $session_id_encrypt = isset( $_POST['session_id'] ) ? sanitize_text_field( $_POST['session_id'] ) : null; $pass2fa_login_session = new Molms_Password_2Factor_Login(); if ( is_null( $session_id_encrypt ) ) { $session_id_encrypt = $pass2fa_login_session->create_session(); } if ( get_site_option( 'mo2f_enable_login_with_2nd_factor' ) ) { //login with phone overwrite default login form //if the php session folder has insufficient permissions, cookies to be used $login_status_phone_enable = molms_2f_Utility::mo2f_retrieve_user_temp_values( 'mo_2factor_login_status', $session_id_encrypt ); if ( MOLMS_IS_ONPREM ) { $userName = isset( $_POST['mo2fa_username'] ) ? sanitize_text_field( $_POST['mo2fa_username'] ) : ''; if ( ! empty( $userName ) ) { $user = get_user_by( 'login', $userName ); if ( $user ) { $currentMethod = $molms_db_queries->get_user_detail( 'mo2f_configured_2FA_method', $user->ID ); if ( $currentMethod == 'None' or $currentMethod == '' ) { $login_status_phone_enable = 'MO_2_FACTOR_LOGIN_WHEN_PHONELOGIN_ENABLED'; } } } } if ( $login_status_phone_enable == 'MO_2_FACTOR_LOGIN_WHEN_PHONELOGIN_ENABLED' && isset( $_POST['miniorange_login_nonce'] ) && wp_verify_nonce( sanitize_text_field( $_POST['miniorange_login_nonce'] ), 'miniorange-2-factor-login-nonce' ) ) { $this->mo_2_factor_show_login_with_password_when_phonelogin_enabled(); $this->mo_2_factor_show_wp_login_form_when_phonelogin_enabled(); $user = isset( $_SESSION['mo2f_current_user'] ) ? json_decode( $_SESSION['mo2f_current_user'] ) : null; $mo2f_user_login = is_null( $user ) ? null : $user->user_login; ?> mo_2_factor_show_login(); $this->mo_2_factor_show_wp_login_form(); } } else { //Login with phone is alogin with default login form $this->mo_2_factor_show_login(); $this->mo_2_factor_show_wp_login_form(); } } public function mo_2_factor_show_login_with_password_when_phonelogin_enabled() { wp_register_style( 'show-login', plugins_url( 'includes/css/show-login.css?version=5.1.21', dirname( dirname( __FILE__ ) ) ) ); wp_enqueue_style( 'show-login' ); } // login form fields public function mo_2_factor_show_wp_login_form_when_phonelogin_enabled() { ?> create_session(); } ?>