Henrik Schack
Forum Replies Created
-
Forum: Plugins
In reply to: [Google Authenticator] Make account heading configurableOK, I’ve added that to my ToDo list.
Best regards
Henrik SchackForum: Plugins
In reply to: [Google Authenticator] App Passwords Not WorkingOk, great you got it working
Best regards
Henrik SchackForum: Plugins
In reply to: [Google Authenticator] Feature Request – Separate From Username/Password AreaI may have found a smart way of doing this with risking to break down everything during upgrades, I’ll be testing in near future.
Best regards
Henrik SchackForum: Plugins
In reply to: [Google Authenticator] Latest Version Not working – at allAhh now I get it 🙂
Seems to be working perfectly, had no trouble logging in.
Nice work .Best regards
Henrik SchackForum: Plugins
In reply to: [Google Authenticator] Latest Version Not working – at allStrange it did not detect anything on my blog
Forum: Plugins
In reply to: [Google Authenticator] Latest Version Not working – at allAre you sure you got it uploaded ? I just downloaded and installed manually, seem to be the normal version
Best regards
Henrik SchackQR codes are now created using Javascript.
Forum: Plugins
In reply to: [Google Authenticator] Latest Version Not working – at allIf I found a way to do as you request I’m pretty sure my plugin would become incompatible with Keith’s plugin since he would not be able to perform the credentialcheck within a single pageview.
I haven’t looked that much into how I eventually could implement what you’re talking about, perhaps it’s time.
Forum: Plugins
In reply to: [Google Authenticator] Latest Version Not working – at allNo idea, I’ve never tried it. But you could give it a try.
If it serves you better, I guess that’s the way to go for you.Forum: Plugins
In reply to: [Google Authenticator] Latest Version Not working – at allNo that won’t work, check of the google authenticator code is part of the credentialcheck.
WordPress.com can do as the do because they are in control of the core AND the code performing the google authenticator check actually it’s all part of the core, I’m only in control of my own plugins code and have to fit into the way WordPress works.
Best regards
Henrik SchackForum: Plugins
In reply to: [Google Authenticator] Latest Version Not working – at allHi
Disabling the step makes sense, I know the fear of locking users out, kept me up until 3am last night 🙂Best regards
Henrik SchackForum: Plugins
In reply to: [Google Authenticator] Latest Version Not working – at allTwo things.
That would require hack to the WordPress login flow that I do not want to implement, I don’t want risking to render a lot of users unable to login sometime in the future because of a WordPress version that changes the existing flow.Second: With the change you mention I think the credential check would allways fail.
Forum: Plugins
In reply to: [Google Authenticator] Latest Version Not working – at allHi
If you add a check for the presence of my plugin, and if present warn the user about the incompatibility between credential check and man-in-the-middle protection I think everyone would be happy 🙂Perhaps you could advice users to disable my plugin while setting up and configuring yours ? I guess that would avoid most problems, at least if they remember to disable the credentialcheck feature after everything is up and running.
Best regards
Henrik SchackForum: Plugins
In reply to: [Google Authenticator] Latest Version Not working – at allYes, with the last update I added Man-in-the-middle protection ( http://en.wikipedia.org/wiki/Man-in-the-middle_attack )
Or in short, each code can be used only once.
When you have the mentioned checkmark set, this is just what Stop Spammers peforms, ie the Stop Spammers plugin uses your code, and thereby invalidates it for further use by your actual login.
Next version will contain a FAQ entry mentioning this sort of problem, and the plugin will log situations like what you have been experiencing to the serverlog.
If you feel satisfied with my plugin now, I would appreciate it if you would reevaluate your compatability rating.
Best regards
Henrik SchackForum: Plugins
In reply to: [Google Authenticator] Latest Version Not working – at allGreat !