* @ Website : http://www.mtimer.cn
*
**/
define("ADMINAREA", true);
require "../init.php";
$aInt = new WHMCS_Admin("Configure Administrators");
$aInt->title = $aInt->lang("administrators", "title");
$aInt->sidebar = "config";
$aInt->icon = "admins";
$aInt->helplink = "Administrators";
$validate = new WHMCS_Validate();
if ($action == "save") {
check_token("WHMCS.admin.default");
$auth = new WHMCS_Auth();
$auth->getInfobyID(WHMCS_Session::get("adminid"));
if (!$auth->comparePassword($whmcs->get_req_var("confirmpassword"))) {
$_ADMINLANG['administrators']['confirmexistingpw'] = "You must confirm your existing administrator password";
$validate->addError(array("administrators", "confirmexistingpw"));
} else {
$validate->validate("required", "firstname", array("administrators", "namerequired"));
if ($validate->validate("required", "email", array("administrators", "emailerror"))) {
$validate->validate("email", "email", array("administrators", "emailinvalid"));
}
if ($validate->validate("required", "username", array("administrators", "usererror"))) {
$existingid = get_query_val("tbladmins", "id", array("username" => $username));
if (!$id && $existingid || $id && $existingid && $id != $existingid) {
$validate->addError("administrators", "userexists");
}
}
if (!$id) {
if ($validate->validate("required", "password", array("administrators", "pwerror"))) {
$action = $whmcs->get_req_var("action");
$errormessage = "";
$twofa = new WHMCS_2FA();
$twofa->setAdminID($_SESSION['adminid']);
if ($whmcs->get_req_var("2fasetup")) {
if (!$twofa->isActiveAdmins()) {
exit("Access denied");
}
ob_start();
if ($twofa->isEnabled()) {
echo "<div class=\"content\"><div style=\"padding:15px;\">";
$disabled = $incorrect = false;
if ($password = $whmcs->get_req_var("pwverify")) {
$auth = new WHMCS_Auth();
$auth->getInfobyID($_SESSION['adminid']);
if ($auth->comparePassword($password)) {
$twofa->disableUser();
$disabled = true;
} else {
$incorrect = true;
}
}
echo "<h2>" . $aInt->lang("twofa", "disable") . "</h2>";
if (!$disabled) {
echo "<p>" . $aInt->lang("twofa", "disableintro") . "</p>";
if ($incorrect) {
echo "<div class=\"errorbox\"><strong>Password Incorrect</strong><br />Please try again...</div>";
}
echo "<form onsubmit=\"dialogSubmit();return false\"><input type=\"hidden\" name=\"2fasetup\" value=\"1\" /><p align=\"center\">" . $aInt->lang("fields", "password") . ": <input type=\"password\" name=\"pwverify\" value=\"\" size=\"20\" /><p><p align=\"center\"><input type=\"button\" value=\"" . $aInt->lang("global", "disable") . "\" class=\"btn\" onclick=\"dialogSubmit()\" /></p></form>";
} else {
echo "<p>" . $aInt->lang("twofa", "disabledconfirmation") . "</p><p align=\"center\"><input type=\"button\" value=\"" . $aInt->lang("global", "close") . "\" onclick=\"window.location='myaccount.php'\" /></p>";
