diff --git a/loginSystem/views.py b/loginSystem/views.py index 372a22f27..da4af680e 100644 --- a/loginSystem/views.py +++ b/loginSystem/views.py @@ -104,14 +104,13 @@ def verifyLogin(request): if hashPassword.check_password(admin.password, password): - if admin.twoFA: if request.session['twofa'] == 0: import pyotp totp = pyotp.TOTP(admin.secretKey) del request.session['twofa'] - logging.writeToFile(str(totp.now())) - if totp.verify(data['twofa']): + if totp.now() != data['twofa']: + request.session['twofa'] = 0 data = {'userID': 0, 'loginStatus': 0, 'error_message': "Invalid verification code."} json_data = json.dumps(data) response.write(json_data)