';
$html .= $common_helper->mo2f_otp_based_methods_configuration_screen( $skeleton, $this->mo2f_current_method, $content['mo2fa_login_message'], $current_user_id, $redirect_to, $session_id, $prev_screen );
$html .= '
';
$html .= $inline_helper->mo2f_get_inline_hidden_forms( $redirect_to, $session_id, $current_user->ID );
$html .= $common_helper->mo2f_get_script_for_otp_based_methods( 'inline' );
echo $html;// phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- Already escaped the necessary in the definition.
exit;
}
/**
* Sends OTP to users phone.
*
* @param string $phone Phone number.
* @param string $session_id_encrypt Sessiond Id.
* @param object $user User.
* @param string $message message.
* @return void
*/
public function mo2f_send_otp( $phone, $session_id_encrypt, $user, $message ) {
global $mo2f_onprem_cloud_obj, $mo2fdb_queries;
$phone = $phone ?? $mo2fdb_queries->get_user_detail( 'mo2f_user_phone', $user->ID );
TwoFAMoSessions::add_session_var( 'user_phone_temp', $phone );
$content = json_decode( $mo2f_onprem_cloud_obj->send_otp_token( $phone, null, $this->mo2f_current_method, $user ), true );
$this->mo2f_process_send_otp_content( $content, $session_id_encrypt, $user, $phone, $message );
}
/**
* Processes inline send otp.
*
* @param array $content Content.
* @param string $session_id_encrypt Session id.
* @param object $user User.
* @param string $phone Phone.
* @param string $message message.
* @return void
*/
public function mo2f_process_send_otp_content( $content, $session_id_encrypt, $user, $phone, $message ) {
if ( json_last_error() === JSON_ERROR_NONE ) { /* Generate otp token */
if ( 'ERROR' === $content['status'] ) {
wp_send_json_error( $content['message'] );
} elseif ( MoWpnsConstants::SUCCESS_RESPONSE === $content['status'] ) {
MO2f_Utility::mo2f_set_transient( $session_id_encrypt, 'mo2f_transactionId', $content['txId'] );
TwoFAMoSessions::add_session_var( 'mo2f_transactionId', $content['txId'] );
TwoFAMoSessions::add_session_var( 'mo2f_otp_send_true', true );
$mo2f_sms = get_site_option( 'cmVtYWluaW5nT1RQVHJhbnNhY3Rpb25z' );
if ( $mo2f_sms > 0 ) {
update_site_option( 'cmVtYWluaW5nT1RQVHJhbnNhY3Rpb25z', $mo2f_sms - 1 );
}
wp_send_json_success( $message . ' ' . $phone . '. ' . MoWpnsMessages::lang_translate( MoWpnsMessages::ENTER_OTP ) . MoWpnsMessages::lang_translate( MoWpnsMessages::VERIFY_YOURSELF ) );
} else {
wp_send_json_error( MoWpnsMessages::lang_translate( MoWpnsMessages::GET_FREE_TRANSACTIONS ) );
}
} else {
wp_send_json_error( MoWpnsMessages::lang_translate( MoWpnsMessages::INVALID_REQ ) );
}
}
/**
* Validates OTP for SMS.
*
* @param string $otp_token OTP token.
* @param string $session_id_encrypt Transaction id.
* @param object $user Current user.
* @param object $prev_input Previous input.
* @param array $post Post data.
* @return void
*/
public function mo2f_validate_otp( $otp_token, $session_id_encrypt, $user, $prev_input, $post ) {
global $mo2f_onprem_cloud_obj;
$user_phone = TwoFAMoSessions::get_session_var( 'user_phone_temp' );
$this->mo2f_mismatch_input_check( $user_phone, $prev_input );
$mo2f_transaction_id = MO2f_Utility::mo2f_get_transient( $session_id_encrypt, 'mo2f_transactionId' );
$content = json_decode( $mo2f_onprem_cloud_obj->validate_otp_token( $this->mo2f_current_method, null, $mo2f_transaction_id, $otp_token, $user ), true );
$this->mo2f_process_validate_otp_content( $content, $user, $user_phone );
}
/**
* Process validate otp.
*
* @param array $content Content.
* @param object $user User.
* @param string $user_phone User phone.
* @return void
*/
public function mo2f_process_validate_otp_content( $content, $user, $user_phone ) {
if ( 'ERROR' === $content['status'] ) {
wp_send_json_error( MoWpnsMessages::lang_translate( $content['message'] ) );
} elseif ( strcasecmp( $content['status'], 'SUCCESS' ) === 0 ) {
$email = get_user_by( 'id', $user->ID )->user_email;
$response = $this->mo2f_update_user_details( $user, $email, $user_phone );
TwoFAMoSessions::unset_session( 'user_phone_temp' );
TwoFAMoSessions::unset_session( 'mo2f_otp_send_true' );
$this->mo2f_process_update_details_response( $response, $user );
} else { // OTP Validation failed.
wp_send_json_error( MoWpnsMessages::lang_translate( MoWpnsMessages::INVALID_OTP ) );
}
}
/**
* Processes update details.
*
* @param array $response Response.
* @param object $user User.
* @return void
*/
public function mo2f_process_update_details_response( $response, $user ) {
if ( json_last_error() === JSON_ERROR_NONE ) {
if ( MoWpnsConstants::SUCCESS_RESPONSE === $response['status'] ) {
wp_send_json_success( 'Your 2FA method has been set successfully.' );
} else {
wp_send_json_error( MoWpnsMessages::lang_translate( MoWpnsMessages::ERROR_DURING_PROCESS ) );
}
} else {
wp_send_json_error( MoWpnsMessages::lang_translate( MoWpnsMessages::INVALID_REQ ) );
}
}
/**
* Checks input mismatch.
*
* @param string $temp_phone Temp email.
* @param string $prev_input previously entered email.
* @return void
*/
public function mo2f_mismatch_input_check( $temp_phone, $prev_input ) {
if ( $temp_phone !== $prev_input ) {
wp_send_json_error( MoWpnsMessages::lang_translate( MoWpnsMessages::PHONE_NUMBER_MISMATCH ) );
}
}
/**
* Updates GA details in database.
*
* @param object $user Current user.
* @param string $email Email.
* @param string $user_phone User phone.
* @return array
*/
public function mo2f_update_user_details( $user, $email, $user_phone ) {
global $mo2f_onprem_cloud_obj;
delete_user_meta( $user->ID, 'mo2f_user_profile_set' );
return json_decode( $mo2f_onprem_cloud_obj->mo2f_update_user_info( $user->ID, true, $this->mo2f_current_method, MoWpnsConstants::SUCCESS_RESPONSE, MoWpnsConstants::MO_2_FACTOR_PLUGIN_SETTINGS, true, $email, $user_phone, 'API_2FA', true ), true );
}
/**
* Returns error message.
*
* @param object $currentuser Current user.
* @return string
*/
public function mo2f_get_error_message( $currentuser ) {
if ( user_can( $currentuser->ID, 'administrator' ) ) {
return MoWpnsMessages::GET_FREE_TRANSACTIONS;
} else {
return MoWpnsMessages::ERROR_DURING_PROCESS;
}
}
/**
* Show SMS configuration prompt on dashboard.
*
* @return mixed
*/
public function mo2f_prompt_2fa_setup_dashboard() {
global $mo2fdb_queries;
$current_user = wp_get_current_user();
$mo2fdb_queries->insert_user( $current_user->ID );
$common_helper = new Mo2f_Common_Helper();
if ( get_site_option( 'mo_2factor_admin_registration_status' ) === 'MO_2_FACTOR_CUSTOMER_REGISTERED_SUCCESS' ) {
$skeleton = $common_helper->mo2f_sms_common_skeleton( $current_user->ID );
$html = $common_helper->mo2f_otp_based_methods_configuration_screen( $skeleton, $this->mo2f_current_method, '', $current_user->ID, '', '', 'dashboard' );
$html .= $this->mo2f_get_hidden_forms_dashboard( $common_helper );
$html .= $common_helper->mo2f_get_script_for_otp_based_methods( 'dashboard' );
} else {
$skeleton = array(
'##crossbutton##' => '