← All changes
|
src/component/two-factor/providers/class-fallback-email.php
+3
-3
5.3.1
→
6.3.0
View file →
| @@ -160,9 +160,9 @@ | ||
| 160 | 160 | if ( is_null( $user_id ) ) { |
| 161 | 161 | $user_id = get_current_user_id(); |
| 162 | 162 | } |
| 163 | 163 | $email = get_user_meta( $user_id, self::FALLBACK_EMAIL_KEY, true ); |
| 164 | - if ( empty( $email ) ) { | |
| 164 | + if ( ! is_string( $email ) || '' === $email ) { | |
| 165 | 165 | $user = get_user_by( 'id', $user_id ); |
| 166 | 166 | if ( ! is_object( $user ) ) { |
| 167 | 167 | return false; |
| 168 | 168 | } |
| @@ -181,9 +181,9 @@ | ||
| 181 | 181 | */ |
| 182 | 182 | public function validate_authentication( $user ) { |
| 183 | 183 | $otp = HTTP::post( 'otp', '' ); |
| 184 | 184 | $backup_code = get_user_meta( $user->ID, self::FALLBACK_BACKUP_CODE_KEY, true ); |
| 185 | - if ( ! empty( $backup_code ) && Crypt::compare_lines( $backup_code['code'], wp_hash( $otp ) ) | |
| 185 | + if ( isset( $backup_code['code'] ) && isset( $backup_code['time'] ) && Crypt::compare_lines( $backup_code['code'], wp_hash( $otp ) ) | |
| 186 | 186 | && strtotime( '+3 minutes', $backup_code['time'] ) > time() |
| 187 | 187 | ) { |
| 188 | 188 | delete_user_meta( $user->ID, self::FALLBACK_BACKUP_CODE_KEY ); |
| 189 | 189 | |
| @@ -192,9 +192,9 @@ | ||
| 192 | 192 | $lockout_message = $this->get_component()->verify_attempt( $user->ID, self::$slug ); |
| 193 | 193 | |
| 194 | 194 | return new WP_Error( |
| 195 | 195 | 'opt_fail', |
| 196 | - empty( $lockout_message ) ? esc_html__( 'ERROR: Invalid passcode.', 'defender-security' ) : $lockout_message | |
| 196 | + '' === $lockout_message ? esc_html__( 'ERROR: Invalid passcode.', 'defender-security' ) : $lockout_message | |
| 197 | 197 | ); |
| 198 | 198 | } |
| 199 | 199 | } |
| 200 | 200 | } |