';
echo '
' . __('One-Time Password Administration', 'one-time-password') . '
';
// Render generate form
?>
isValidPassPhrase($otp_pwd) || $otp_pwd != $wpdb->escape($otp_pwd)) {
$param_ok = false;
echo '
' . __('Invalid pass-phrase', 'one-time-password') . '';
}
// Verify pass-phrase
if ($otp_pwd != $otp_verify) {
$param_ok = false;
echo '
' . __('Pass-phrases do not match', 'one-time-password') . '';
}
// Check seed
if (!$otp_class->isValidSeed($otp_seed) || $otp_seed != $wpdb->escape($otp_seed)) {
$param_ok = false;
echo '
' . __('Invalid seed', 'one-time-password') . '';
}
// Check algorithm
if (!in_array($otp_algorithm, $otp_class->getAvailableAlgorithms())) {
$param_ok = false;
echo '
' . __('Invalid algorithm', 'one-time-password') . '';
}
// Check count
if ($otp_count <= 0 || $otp_count > 1000) {
$param_ok = false;
echo '
' . __('Invalid count', 'one-time-password') . '';
}
if ($param_ok) {
// Generate password list
$otp_list = $otp_class->generateOtpList($otp_pwd, $otp_seed, null, $otp_count + 1, $otp_algorithm);
// Delete old data
$sql = "DELETE FROM " . $otp_table . " WHERE user='" . $otp_user . "'";
if ($wpdb->query($sql) === false)
$wpdb->print_error();
// Store new data
$sql = "INSERT INTO " . $otp_table .
" (user, seed, algorithm, sequence, hash, generated) VALUES (" .
"'" . $otp_user . "', " .
"'" . $otp_seed . "', " .
"'" . $otp_algorithm . "', " .
$otp_list[1]['sequence'] . ", " .
"'" . $otp_list[0]['hex_otp'] . "', " .
"now());";
if ($wpdb->query($sql) === false)
$wpdb->print_error();
// Get generation time
$otp_time = $wpdb->get_var("SELECT generated FROM " . $otp_table . " WHERE user='" . $otp_user . "'");
// Render password list / print form
?>
query($sql) === false)
$wpdb->print_error();
}
}
// Check for existing data
$otp_row = $wpdb->get_row("SELECT seed, algorithm, sequence, generated, last_login FROM " . $otp_table . " WHERE user='" . $otp_user . "'");
if ($otp_row != null) {
// Render revoke form
?>
' . __('Select "I am sure" to revoke', 'one-time-password') . '
';
// Render settings form
if (current_user_can('manage_options')) {
$otp_cleanup = get_option('otp_cleanup') ? "checked" : "unchecked";
?>
';
// Output admin jQuery
$plugin_url = WP_PLUGIN_URL . '/' . plugin_basename(dirname(__FILE__));
?>
escape($current_user->user_login);
// Get current sequence
$otp_table = $wpdb->prefix . 'otp';
$otp_row = $wpdb->get_row("SELECT sequence FROM " . $otp_table . " WHERE user='" . $otp_user . "'");
// Check password list
if ($otp_row == null || $otp_row->sequence <= 0) {
// Render notice
$url = admin_url('options-general.php?page=one-time-password/otp.php');
echo '
';
}
}
}
// Register (de)activation hook
if (function_exists('register_activation_hook'))
register_activation_hook(__FILE__, 'otp_activate');
if (function_exists('register_deactivation_hook'))
register_deactivation_hook(__FILE__, 'otp_deactivate');
// Register actions
if (function_exists('add_action')) {
add_action('init', 'otp_init');
add_action('login_head', 'otp_login_head');
add_action('login_form', 'otp_login_form');
if (is_admin()) {
add_action('admin_menu', 'otp_admin_menu');
add_action('admin_notices', 'otp_admin_notices');
}
}
// Register filters
if (function_exists('add_filter')) {
add_filter('authenticate', 'otp_authenticate', 10);
// 20 wp_authenticate_username_password
// 30 wp_authenticate_cookie
}
// That's it!
?>