| 
<?phpinclude_once '../../session.php';
 
 $otpauth = new \RobThree\Auth\TwoFactorAuth(new \RobThree\Auth\Providers\Qr\ImageChartsQRCodeProvider(), "Uploady");
 
 if ($_SERVER['REQUEST_METHOD'] == 'POST') {
 if ($auth->checkToken($_POST['csrf'], $_SESSION['csrf']) == false) {
 $msg_code = "csrf";
 } else {
 if (isset($_POST['enable'])) {
 if ($otpauth->verifyCode($_POST['otp_secret'], $_POST['otp_code'])) {
 $user->update($_POST['id'], [
 'otp_status' => true,
 'otp_secret' => $_POST['otp_secret'],
 ]);
 $msg_code = "two_factor_enabled";
 } else {
 $msg_code = "err";
 }
 }
 
 if (isset($_POST['disable'])) {
 $user->update($_POST['id'], [
 'otp_status' => false,
 'otp_secret' => ''
 ]);
 $msg_code = "two_factor_disabled";
 }
 }
 
 $utils->redirect($utils->siteUrl("/profile/auth.php?msg={$msg_code}"));
 }
 
 |