Resolved an issue in the SQL query responsible for enabling and disab…

…ling two-factor authentication on Passky Servers utilizing the MySQL engine.
Rabbit-Company · Feb 24, 2023 · 6aa9377 · 6aa9377
1 parent 33c817f
commit 6aa9377
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/server/src/Database.php b/server/src/Database.php
@@ -766,7 +766,7 @@ public static function enable2Fa(string $username, string $token) : string{
 		try{
 			$conn = Settings::createConnection();
 
-			$stmt = $conn->prepare('UPDATE users SET "2fa_secret" = :secret, backup_codes = :codes WHERE username = :username');
+			$stmt = $conn->prepare('UPDATE users SET `2fa_secret` = :secret, backup_codes = :codes WHERE username = :username');
 			$stmt->bindParam(':secret', $secret, PDO::PARAM_STR);
 			$stmt->bindParam(':codes', $codes, PDO::PARAM_STR);
 			$stmt->bindParam(':username', $username, PDO::PARAM_STR);
@@ -807,7 +807,7 @@ public static function disable2Fa(string $username, string $token) : string{
 		try{
 			$conn = Settings::createConnection();
 
-			$stmt = $conn->prepare('UPDATE users SET "2fa_secret" = null WHERE username = :username');
+			$stmt = $conn->prepare('UPDATE users SET `2fa_secret` = null WHERE username = :username');
 			$stmt->bindParam(':username', $username, PDO::PARAM_STR);
 			$stmt->execute();
 

diff --git a/server/src/website/actions/editAccount.php b/server/src/website/actions/editAccount.php
@@ -42,7 +42,7 @@
 	}
 
 	if($disable2fa){
-		$stmt = $conn->prepare('UPDATE users SET "2fa_secret" = null, yubico_otp = null, backup_codes = null WHERE username = :username');
+		$stmt = $conn->prepare('UPDATE users SET `2fa_secret` = null, yubico_otp = null, backup_codes = null WHERE username = :username');
 		$stmt->bindParam(':username', $username, PDO::PARAM_STR);
 		$stmt->execute();
 	}