From 05ca08c5c383d0273719b68c82257c69925c4973 Mon Sep 17 00:00:00 2001 From: Michael Kaufmann Date: Fri, 30 Aug 2024 16:26:55 +0200 Subject: [PATCH] do not overwrite needed userinfo to avoid successful login when using email 2fa Signed-off-by: Michael Kaufmann --- index.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/index.php b/index.php index a1157134..73b0fff3 100644 --- a/index.php +++ b/index.php @@ -111,7 +111,7 @@ if ($action == '2fa_entercode') { // when using email-2fa, remove the one-time-code if ($userinfo['type_2fa'] == '1') { $del_stmt = Database::prepare("UPDATE " . $table . " SET `data_2fa` = '' WHERE `" . $field . "` = :uid"); - $userinfo = Database::pexecute_first($del_stmt, [ + Database::pexecute_first($del_stmt, [ 'uid' => $uid ]); }