Henrik Schack
Forum Replies Created
-
Forum: Plugins
In reply to: [Google Authenticator] Latest Version Not working – at allI would say it sounds like you have a time drift problem on your server or phone.
Did you check that, do you have a ntp daemon running on the server?Forum: Plugins
In reply to: [Google Authenticator] Latest Version Not working – at allHi
The plugin is working fine.
Let’s try to locate where things break, did you try to disable your Genesis theme, and see if the problem persists?
Best reards
Henrik SchackForum: Plugins
In reply to: [Google Authenticator] Suggestion: updated screenshotsHmm have to say I don’t see much (if any) of a difference between my existing screenshots and the ones I can make in a 3.8 installation
Forum: Plugins
In reply to: [Google Authenticator] Suggestion: updated screenshotsHi Michael
They will be updated with the next release.
Thanks for the tipBest regards
Henrik SchackHi
I see nothing but advantages from using the Google API.
There has been no API changes during the time I’ve used the Google API
Speed ? seems a bit irellevant it’s way fast enough. The added code from the QRCode lib would only stress lowmemory installations further.
Google down ? Now that was a joke right 🙂
I won’t include that huge lib just to generate a QR code.
Best regards
Henrik SchackForum: Plugins
In reply to: [Google Authenticator] Is user logged in using authenticator?Oh by the way.
If a user has my plugin enabled then he’ll always be logged in via it.
Otherwise he’ll be using the WordPress app and wont have access to any admin pages.
Or am I wrong ?Best regards
Henrik SchackForum: Plugins
In reply to: [Google Authenticator] Is action on failed login safe?No it would not be that hard, but another side effect would be the amount of email I would get when people forget their password 🙁
Best regards
Henrik SchackLet’s take a moment and think about what it is this plugin is supposed to do.
I assume you have nothing secret on a public visible blog.
So I guess what matters the most is that unauthorized people don’t get access to your administrationbackend and post a lot of porn-crap or malware infection kits etc.With this in mind I don’t think getting a QRcode from Googles servers over HTTPS is a risk worth mentioning.
Best regards
Henrik SchackForum: Plugins
In reply to: [Google Authenticator] Display in Front End PageEnabling/disabling the GA settings has to be on the user profile page, that’s the rights place for that kinda’ stuff.
Since most WordPress installations use HTTP, I can’t think of a safe way to implement some sort of remember device feature.
Best regards
Henrik SchackForum: Plugins
In reply to: [Google Authenticator] Is user logged in using authenticator?In the next release, usermeta will contain information about the last 2FA logintime.
Would that serve your purpose ?Best regards
Henrik SchackDepending on a no longer maintained QRcode lib doesn’t seem like a good idea.
Best regards
Henrik SchackForum: Plugins
In reply to: [Google Authenticator] Doesn't play nice with Theme My LoginIf this is what you’re talking about : http://wordpress.org/plugins/themed-login/
I think you should talk to the plugin author
Best regards
Henrik SchackForum: Plugins
In reply to: [Google Authenticator] Only Administrator can log inHi
mbsolution is right, you need two different codes when dealing with two accounts.Best regards
Henrik SchackForum: Plugins
In reply to: [Google Authenticator] Only Administrator can log inPerhaps time is drifting on one of the phones ?
Best regards
Henrik SchackForum: Plugins
In reply to: [Google Authenticator] Can I specify a Secret?No, that would be bad security.
I you want such a feature you will have to copy the database entries yourself.Best regards
Henrik Schack