Version Description
Download this release
Release Info
Developer | cyberlord92 |
Plugin | Google Authenticator – WordPress Two Factor Authentication (2FA) |
Version | 5.4.30 |
Comparing to | |
See all releases |
Code changes from version 5.4.29 to 5.4.30
- helper/curl.php +14 -21
- helper/utility.php +1 -1
- miniorange_2_factor_settings.php +2 -2
- readme.txt +177 -131
- views/twofa/setup_twofa.php +1 -40
helper/curl.php
CHANGED
@@ -186,27 +186,20 @@ class MocURL
|
|
186 |
$fromEmail = 'no-reply@xecurify.com';
|
187 |
$Di = get_site_option('No_of_days_active_work');
|
188 |
$Di = intval($Di);
|
189 |
-
if ($feedback_option == 'mo_wpns_skip_feedback'
|
190 |
-
|
191 |
-
|
192 |
-
|
193 |
-
|
194 |
-
|
195 |
-
|
196 |
-
|
197 |
-
|
198 |
-
|
199 |
-
|
200 |
-
|
201 |
-
|
202 |
-
|
203 |
-
{
|
204 |
-
$subject = "Feedback: WordPress miniOrange 2-Factor Plugin - ". $email.' Use :'.$Di.' Days';;
|
205 |
-
}
|
206 |
-
elseif ($feedback_option == 'mo_wpns_rating' )
|
207 |
-
{
|
208 |
-
$subject = "Feedback: WordPress miniOrange 2-Factor Plugin - ". $email.' Use :'.$Di.' Day';;
|
209 |
-
}
|
210 |
|
211 |
|
212 |
$user = wp_get_current_user();
|
186 |
$fromEmail = 'no-reply@xecurify.com';
|
187 |
$Di = get_site_option('No_of_days_active_work');
|
188 |
$Di = intval($Di);
|
189 |
+
if ($feedback_option == 'mo_wpns_skip_feedback')
|
190 |
+
{
|
191 |
+
$subject = "Deactivate [Feedback Skipped]: WordPress miniOrange 2-Factor Plugin :" .$Di ;
|
192 |
+
|
193 |
+
}
|
194 |
+
elseif ($feedback_option == 'mo_wpns_feedback' )
|
195 |
+
{
|
196 |
+
|
197 |
+
$subject = "Feedback: WordPress miniOrange 2-Factor Plugin - ". $email.' : ' .$Di;
|
198 |
+
}
|
199 |
+
elseif ($feedback_option == 'mo_wpns_rating' )
|
200 |
+
{
|
201 |
+
$subject = "Feedback: WordPress miniOrange 2-Factor Plugin - ". $email.' : '.$Di;
|
202 |
+
}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
203 |
|
204 |
|
205 |
$user = wp_get_current_user();
|
helper/utility.php
CHANGED
@@ -366,7 +366,7 @@ class MoWpnsUtility
|
|
366 |
}else{
|
367 |
$backup_codes_remaining = 0;
|
368 |
}
|
369 |
-
$plugin_configuration ="<br><br><I>Plugin Configuration :-</I>".$space."On-premise:".($is_onprem?"Yes":"No"). $space."2FA method:" . ($mo2f_configured_2FA_method==''?"Not selected":$mo2f_configured_2FA_method).$space."No. of 2FA users :".$NoOf2faUsers.($other_methods==''?"NONE":$
|
370 |
if(get_user_meta($user_object->ID, 'mo_backup_code_generated', true) || get_user_meta($user_object->ID, 'mo_backup_code_downloaded', true))
|
371 |
$plugin_configuration=$plugin_configuration.$space."Backup Codes:".$backup_codes_remaining."/5";
|
372 |
$plugins='';
|
366 |
}else{
|
367 |
$backup_codes_remaining = 0;
|
368 |
}
|
369 |
+
$plugin_configuration ="<br><br><I>Plugin Configuration :-</I>".$space."On-premise:".($is_onprem?"Yes":"No"). $space."2FA method:" . ($mo2f_configured_2FA_method==''?"Not selected":$mo2f_configured_2FA_method).$space."No. of 2FA users :".$NoOf2faUsers.$space."Methods of users:".($other_methods==''?"NONE":$other_methods).$space."Email transactions:".$EmailTransactions.$space."SMS Transactions:".$SMSTransactions.$space.(is_multisite()?"Multisite:Yes":"Single-site:Yes").((mo2f_is_customer_registered())?($space."Customer Key:".$key):($space."Customer Registered:'No")).$space."Browser:".$browser;
|
370 |
if(get_user_meta($user_object->ID, 'mo_backup_code_generated', true) || get_user_meta($user_object->ID, 'mo_backup_code_downloaded', true))
|
371 |
$plugin_configuration=$plugin_configuration.$space."Backup Codes:".$backup_codes_remaining."/5";
|
372 |
$plugins='';
|
miniorange_2_factor_settings.php
CHANGED
@@ -3,7 +3,7 @@
|
|
3 |
* Plugin Name: miniOrange 2 Factor Authentication
|
4 |
* Plugin URI: https://miniorange.com
|
5 |
* Description: This plugin provides various two-factor authentication methods as an additional layer of security after the default wordpress login. We Support Google/Authy/LastPass Authenticator, QR Code, Push Notification, Soft Token and Security Questions(KBA) for 3 User in the free version of the plugin.
|
6 |
-
* Version: 5.4.
|
7 |
* Author: miniOrange
|
8 |
* Author URI: https://miniorange.com
|
9 |
* Text Domain: miniorange-2-factor-authentication
|
@@ -15,7 +15,7 @@
|
|
15 |
|
16 |
define( 'MO_HOST_NAME', 'https://login.xecurify.com' );
|
17 |
|
18 |
-
define( 'MO2F_VERSION', '5.4.
|
19 |
define('MO2F_PLUGIN_URL', (plugin_dir_url(__FILE__)));
|
20 |
define( 'MO2F_TEST_MODE', false );
|
21 |
define( 'MO2F_IS_ONPREM', get_option('is_onprem'));
|
3 |
* Plugin Name: miniOrange 2 Factor Authentication
|
4 |
* Plugin URI: https://miniorange.com
|
5 |
* Description: This plugin provides various two-factor authentication methods as an additional layer of security after the default wordpress login. We Support Google/Authy/LastPass Authenticator, QR Code, Push Notification, Soft Token and Security Questions(KBA) for 3 User in the free version of the plugin.
|
6 |
+
* Version: 5.4.30
|
7 |
* Author: miniOrange
|
8 |
* Author URI: https://miniorange.com
|
9 |
* Text Domain: miniorange-2-factor-authentication
|
15 |
|
16 |
define( 'MO_HOST_NAME', 'https://login.xecurify.com' );
|
17 |
|
18 |
+
define( 'MO2F_VERSION', '5.4.30' );
|
19 |
define('MO2F_PLUGIN_URL', (plugin_dir_url(__FILE__)));
|
20 |
define( 'MO2F_TEST_MODE', false );
|
21 |
define( 'MO2F_IS_ONPREM', get_option('is_onprem'));
|
readme.txt
CHANGED
@@ -1,28 +1,28 @@
|
|
1 |
=== Google Authenticator - WordPress Two Factor Authentication (2FA , MFA) ===
|
2 |
|
3 |
Contributors: cyberlord92, twofactor, hsn97
|
4 |
-
Tags: google authenticator, two factor authentication, two factor, 2FA,two-step verification, mobile verification,OTP,
|
5 |
Donate link: https://miniorange.com/
|
6 |
Requires at least: 3.0.1
|
7 |
Tested up to: 5.6
|
8 |
Requires PHP: 5.3.0
|
9 |
-
Stable tag: 5.4.
|
10 |
License: GPLv2 or later
|
11 |
License URI: http://www.gnu.org/licenses/gpl-2.0.html
|
12 |
|
13 |
-
Google Authenticator, OTP verificaion - SMS and Email, Apps like Microsoft, Duo, LastPass & more on login and Registration for all forms. Google AUthenticator also Supports QR Code, Push Notification and Security Questions along with the Google Authenticator itself.
|
14 |
|
15 |
== Description ==
|
16 |
|
17 |
-
Google Authenticator - Two Factor Authentication (2FA) plugin provides a completely Secure login to your WordPress website. Google Authenticator- Two Factor Authentication (2FA) is a FREE, Simple & very easy to setup plugin. Google Authenticator provides two factor authentication (2FA, MFA) whenever login to your WordPress website ensuring no unauthorised access to your website. Google Authenticator can be configured for any TOTP based Authentication Method.
|
18 |
|
19 |
= User Identity Verification or OTP Verification =
|
20 |
Login and Registration: Verify users on login and Registration with different authentication methods like Google Authenticator, SMS Verification, Email, Authy Authenticator, Duo Authenticator, Microsoft Authenticator, TOTP Based Authenticator, Security Questions and many others. Easy OTP Verification with SMS Verification and Email Verification.
|
21 |
|
22 |
-
= Google Authenticator and other 2FA sync on multiple websites =
|
23 |
-
You would not need to configure Google Authenticator and other 2FA methods from second site onword. Just login with miniOrange account and your 2FA will automatically get set. This is available for Google Authenticator, Duo Authenticator, Microsoft Authenticator, Securty Questions, LastPass, Authy, miniOrange methods, OTP over SMS, OTP over Email. It is supported only if you are using our cloud services.
|
24 |
|
25 |
-
== Plugin Integrations and Support ==
|
26 |
* [Woocommerce](https://wordpress.org/plugins/woocommerce/) (Login Woocommerce using Google Authenticator - Two Factor Authentication (2FA))
|
27 |
* [BuddyPress form](https://wordpress.org/plugins/buddypress/) (Login BuddyPress using Google Authenticator - Two Factor Authentication (2FA))
|
28 |
* [bbpress form](https://wordpress.org/plugins/bbpress/) (Login bbpress using Google Authenticator - Two Factor Authentication (2FA))
|
@@ -36,7 +36,7 @@ You would not need to configure Google Authenticator and other 2FA methods from
|
|
36 |
* [Dokan](https://wordpress.org/plugins/dokan-lite/) (Login Dokan using Google Authenticator - Two Factor Authentication (2FA))
|
37 |
* And many more
|
38 |
|
39 |
-
== WordPress login and registration forms support and integration ==
|
40 |
* [Restrict Content Pro Form](https://wordpress.org/plugins/restrict-content/) (Register and Login Restrict Content Pro using Google Authenticator - Two Factor Authentication (2FA))
|
41 |
* [My theme Login Form](https://wordpress.org/plugins/theme-my-login/) (Login My theme Login using Google Authenticator - Two Factor Authentication (2FA))
|
42 |
* [User Registration – Custom Registration Form](https://wordpress.org/plugins/bbpress/) (Register and Login User Registration – Custom Registration using Google Authenticator - Two Factor Authentication (2FA))
|
@@ -58,22 +58,55 @@ Premium plugin supports any third party custom SMS Gateway. If you don't have yo
|
|
58 |
Others not listed gateway can be tested on our site, Test your Gateway: [Custom Gateway](https://login.xecurify.com/moas/login?redirectUrl=https://login.xecurify.com/moas/admin/customer/smsconfig)
|
59 |
|
60 |
= All Registartion Forms Supported =
|
61 |
-
OTP Verification on all
|
62 |
|
63 |
|
64 |
= FREE Plugin Features =
|
65 |
-
* Simplified & easy user interface to setup Google Authenticator and other 2FA methods.
|
66 |
* Google Authenticator - Two Factor Authentication (2FA) for **3 User** forever FREE!
|
67 |
-
* **Variety of Authentication Methods:** Any App supporting TOTP algorithm like Google Authenticator, Authy Authenticator, LastPass Authenticator, Microsoft Authenticator, QR Code, Push Notification, Soft Token and Security Questions(KBA)
|
68 |
-
* Includes Language Translation Support. Supports a wide variety of languages
|
69 |
-
* Passwordless login or login with phone number, supported for Google Authenticator and other
|
70 |
* This plugin Supports standard TOTP + HOTP protocols for Authentication Methods. Any TOTP protocol based authenticator app can be configured using Google Authenticator option in the plugin.
|
71 |
* Two Factor Authentication (2FA) allows authentication on login page itself for Google Authenticator & miniOrange Soft Token.
|
72 |
* Brute force attack prevention & IP Blocking.
|
73 |
-
* User login Monitorning
|
74 |
-
* RCP Login and Registration Suppport
|
75 |
-
* OTP Verification of Ulimate Member Registartion form
|
76 |
-
* Recovery codes in case you are locked out
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
77 |
|
78 |
= Standard Plugin Features =
|
79 |
|
@@ -94,14 +127,14 @@ OTP Verification on all the Registration and Google Authenticator, Security Ques
|
|
94 |
* **Multiple Login Options:** Username + password + two-factor (or) Username + two-factor i.e. Passwordless login [Guide](https://docs.miniorange.com/documentation/login-username-2nd-factor-2)
|
95 |
* **Backup Methods:** KBA(Security Questions), OTP Over Email, Backup Codes [Guide](https://docs.miniorange.com/documentation/want-configure-backup-methods-users-can-configure-case-locked-site-not-able-log)
|
96 |
* Multisite compatible.
|
97 |
-
* Force Two factor for users [Guide](https://docs.miniorange.com/documentation/enforce-2fa-users)
|
98 |
* Email notification to users asking them to set up Two Factor Authentication (2FA) [Guide](https://docs.miniorange.com/documentation/want-send-email-notification-users-setting-2-factor)
|
99 |
* User role based redirection after Login [Guide](https://docs.miniorange.com/documentation/custom-redirect-login-url), Custom Security Questions (KBA) [Guide](https://docs.miniorange.com/documentation/custom-security-questions), Customize account name in Google Authenticator app [Guide](https://docs.miniorange.com/documentation/google-authenticator-app-name).
|
100 |
* Enable Google Authenticator - Two Factor Authentication (2FA) for specific Users/User Roles [Guide](https://docs.miniorange.com/documentation/enable-two-factor-based-roles)
|
101 |
-
* Choose specific authentication methods for Users [Guide](https://docs.miniorange.com/documentation/specific-set-authentication-methods-based-role)
|
102 |
* Set Privacy Policy for users [Guide](https://docs.miniorange.com/documentation/privacy-policy-site)
|
103 |
* App Specific Password to login from mobile Apps
|
104 |
-
* Remember Device [Guide](https://docs.miniorange.com/documentation/remember-my-device)
|
105 |
* **Add-Ons Included:** RBA & Trusted Devices Management Add-on, Personalization Add-on and Short Codes Add-on
|
106 |
|
107 |
= Enterprise Plugin Features =
|
@@ -109,26 +142,26 @@ OTP Verification on all the Registration and Google Authenticator, Security Ques
|
|
109 |
* Google Authenticator - Two Factor Authentication (2FA) for Users as per the upgrade *( User-based pricing )*
|
110 |
* **Available Authentication Methods:** Google Authenticator, Authy Authenticator, Microsoft Authenticator, LastPass Authenticator, QR Code, Push Notification, Soft Token, Security Questions(KBA), OTP Over Email, OTP Over SMS, OTP Over SMS and Email, Email Verification, Hardware Token. *( SMS and Email credits need to be purchased as per the need)*
|
111 |
* Language Translation Support
|
112 |
-
* **Multiple Login Options:** Username + password + two
|
113 |
* **Backup Methods:** KBA(Security Questions), OTP Over Email, Backup Codes
|
114 |
* Multisite compatible.
|
115 |
* Email notification to users asking them to set up Google Authenticator - Two Factor Authentication (2FA).
|
116 |
* User role based redirection after Login, Custom Security Questions (KBA), Customize account name in Google Authenticator app.
|
117 |
* Enable Two Factor Authentication (2FA) for specific Users/User Roles
|
118 |
-
* Choose specific authentication methods for Users
|
119 |
* App Specific Password to login from mobile Apps
|
120 |
* **Add-Ons Included:** RBA & Trusted Devices Management Add-on, Personalization Add-on and Short Codes Add-on
|
121 |
* **Brute force attack prevention, IP Blocking & User login Monitorning. **
|
122 |
* File protection & strong password
|
123 |
-
|
124 |
= PASSWORDLESS LOGIN =
|
125 |
-
Passwordless login is a new way of login in which you and your users can login without entering the password. The login can be done by username and 2
|
126 |
|
127 |
== Prevent Account Sharing Between Users ==
|
128 |
-
Many video sharing and E-learning platforms want to prevent sharing of account between the users. This can be done using miniOrange Two factor plugin. Also, e-learning portals can use this to their advantage. It can be used on any websites which create and sell courses. It can be integrated with plugins like Learndash.
|
129 |
-
Other sites like premium video content or any premium content where you want users not to share passwords between friends and Family then you can go for this solution.
|
130 |
|
131 |
-
= Additional Features =
|
132 |
* **Complete Web Security suite to protect wordpress from any attacks**
|
133 |
* **Web Application Firewall (WAF) : Wordpress Firewall to protect your site**
|
134 |
* **OWASP TOP 10 Protection**
|
@@ -155,42 +188,43 @@ Check all the features here: [miniOrange Website](https://security.miniorange.co
|
|
155 |
|
156 |
= Why do you need to register? =
|
157 |
|
158 |
-
miniOrange Two
|
159 |
-
Adding to this, you can also use the same account on multiple applications and your users do not have to maintain multiple accounts or 2
|
|
|
160 |
|
161 |
= Add Ons [Applicable for Free and Standard Plans, Inclusive in the Premium Plan] =
|
162 |
|
163 |
* RBA & Trusted Devices Management Add-on Features
|
164 |
-
* Remember Device
|
165 |
* Set Device Limit for the users to login
|
166 |
* IP Restriction: Limit users to login from specific IPs
|
167 |
-
* Personalization Add-on Features
|
168 |
* Custom UI of Two Factor Authentication (2FA) popups
|
169 |
* Custom Email and SMS Templates
|
170 |
-
* Customize 'Powered by' Logo
|
171 |
* Customize Plugin Icon
|
172 |
* Customize Plugin Name
|
173 |
|
174 |
* Short Codes Add-on Features
|
175 |
-
* Option to turn on/off 2
|
176 |
* Option to configure the Google Authenticator and Security Questions by user
|
177 |
-
* Option to 'Enable Remember Device' from a custom login form
|
178 |
-
* On-Demand ShortCodes for specific functionalities ( like for enabling 2FA for specific pages)
|
179 |
|
180 |
-
= Apps Supported by the plugin =
|
181 |
* Google Authenticator
|
182 |
* miniOrange Authenticator
|
183 |
* Duo Authenticator
|
184 |
* Microsoft Authenticator
|
185 |
-
* Authy 2
|
186 |
* LastPass Authenticator
|
187 |
* FreeOTP Authenticator
|
188 |
|
189 |
-
<h4>Useful blog posts about two factor authenticaion plugin </h4>
|
190 |
-
*[Beginner’s Guide: How to Add Two
|
191 |
-
*[How to Add WordPress Two
|
192 |
|
193 |
-
Customized solutions and Active support is available. Email us at info@
|
194 |
|
195 |
**Note: The plugin is GDPR Compliant and supports wide variety of Language Translation**
|
196 |
|
@@ -207,7 +241,7 @@ Customized solutions and Active support is available. Email us at info@miniorang
|
|
207 |
3. Activate miniOrange 2 Factor Authentication from the Plugins tab of your admin dashboard.
|
208 |
|
209 |
= Once Activated =
|
210 |
-
1. Select miniOrange 2-Factor from the left menu and follow the instructions.
|
211 |
2. Once, you complete your setup. Click on Log Out button.
|
212 |
3. Enter the username and password. After the initial validation, you will be prompted for the 2-factor method you had set up.
|
213 |
4. Validate yourself with the 2-factor authentication method you configured.
|
@@ -230,9 +264,13 @@ For detailed information, Please check on our website. <a href="https://faq.mini
|
|
230 |
You can also check our video Tutorial:
|
231 |
<iframe width="560" height="315" src="https://www.youtube.com/embed/wLFKakQkpk8" frameborder="0" allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen></iframe>
|
232 |
|
233 |
-
= I want to enable
|
|
|
|
|
|
|
|
|
234 |
|
235 |
-
You can select the roles under Login Settings tab to enable the plugin role wise.
|
236 |
|
237 |
= I have enabled Two-Factor Authentication (2FA) for all users, what happens if an end user tries to login but has not yet registered ? =
|
238 |
|
@@ -240,7 +278,7 @@ If a user has not setup Two-Factor yet, user has to register by inline registrat
|
|
240 |
|
241 |
= I want to enable only one authentication method for my users. What shloud I do? =
|
242 |
|
243 |
-
You can select the authentication methods under Login Settings tab. The selected authentication methods will be shown to the user during inline registration. [PREMIUM FEATURE]
|
244 |
|
245 |
= I am getting the fatal error of call to undefined function json_last_error(). What should I do? =
|
246 |
|
@@ -248,7 +286,7 @@ Please check your php version. The plugin is supported in php version 5.3.0 or a
|
|
248 |
|
249 |
= I did not recieve OTP while trying to register with miniOrange. What should I do? =
|
250 |
|
251 |
-
The OTP is sent to your email address with which you have registered with miniOrange. If you can't see the email from miniOrange in your mails, please make sure to check your SPAM folder. If you don't see an email even in SPAM folder, please submit a query in our Support Section in the plugin or you can contact us at info@
|
252 |
|
253 |
= I want to configure 2nd factor by Google Authenticator. =
|
254 |
|
@@ -267,11 +305,11 @@ There are two cases according to the page you see -<br>
|
|
267 |
|
268 |
= I have a custom / front-end login page on my site and I want the look and feel to remain the same when I add 2 factor ? =
|
269 |
|
270 |
-
If you have a custom login form other than wp-login.php then we will provide you the shortcode. Shortcode will work only for the customized login page created from wordpress plugins. We are not claiming that it will work with all the customized login page. In such case, custom work is needed to integrate two factor with your customized login page. You can submit a query in our <b>Support Section</b> in the plugin or you can contact us at info@
|
271 |
|
272 |
= I have Woocommerce theme login page on my site. How can I enable Two Factor ? =
|
273 |
|
274 |
-
If you have Woocommerce theme login then go to Advanced Options Tab and check Enable Two-Factor for Woocommerce Front End Login. If you need any help setting up 2-Factor for your Woocommerce theme login form, please submit a query in our Support Section in the plugin or you can contact us at info@
|
275 |
|
276 |
= I have installed plugins which limit the login attempts like Limit Login Attempt, Loginizer, Wordfence etc. Is there any incompatibilities with these kind of plugins? =
|
277 |
|
@@ -279,11 +317,11 @@ The limit login attempt kind of plugins limit the number of login attempts and b
|
|
279 |
|
280 |
= If you are using any Security Plugin in WordPress like Simple Security Firewall, All in One WP Security Plugin and you are not able to login with Two-Factor. =
|
281 |
|
282 |
-
Our Two-Factor plugin is compatible with most of the security plugins, but if it is not working for you. Please submit a query in our Support Section in the plugin or you can contact us at info@
|
283 |
|
284 |
= If you are using any render blocking javascript and css plugin like Async JS and CSS Plugin and you are not able to login with Two-Factor or your screen got blank. =
|
285 |
|
286 |
-
If you are using Async JS and CSS Plugin. Please go to its settings and add jquery in the list of exceptions and save settings. It will work. If you are still not able to get it right, Please submit a query in our Support Section in the plugin or you can contact us at info@
|
287 |
|
288 |
= My users have different types of phones. What phones are supported? =
|
289 |
|
@@ -324,7 +362,7 @@ You can login using our alternate login method. Click on the Forgot Phone link a
|
|
324 |
|
325 |
= My phone has no internet connectivity and i am entering the one time passcode from miniOrange Authenticator App, it says Invalid OTP?
|
326 |
|
327 |
-
Click on the <b>Settings Icon</b> on top right corner in <b>miniOrange Authenticator App</b> and then press <b>Sync button</b> under 'Time correction for codes' to sync your time with miniOrange Servers. If you still can't logged in then please email us at info@
|
328 |
|
329 |
= I want to go back to default login with password? =
|
330 |
|
@@ -336,11 +374,11 @@ You should go to <b>Setup Two Factor</b> Tab and click on <b>Reconfigure</b> to
|
|
336 |
|
337 |
= What If I want to use any other second factor like OTP Over SMS, Security Questions, Device Id, etc ? =
|
338 |
|
339 |
-
miniOrange authentication service has 15+ authentication methods.One time passcodes (OTP) over SMS, OTP over Email, OTP over SMS and Email, Out of Band SMS, Out of Band Email, Soft Token, Push Notification, USB based Hardware token (yubico), Security Questions, Mobile Authentication (QR Code Authentication), Voice Authentication (Biometrics), Phone Verification, Device Identification, Location, Time of Access User Behavior. To know more about authentication methods, please visit <a href="https://miniorange.com/strong_auth" target="_blank">https://miniorange.com/strong_auth </a>. If you want to have any other 2-factor for your WordPress site, please email us at info@
|
340 |
|
341 |
== Screenshots ==
|
342 |
|
343 |
-
1. Google Authenticator (2FA) - Setup different 2
|
344 |
2. Google Authenticator (2FA) - Test 2 factor configured
|
345 |
3. Google Authenticator (2FA) - 2 Factor Authentication methods available
|
346 |
4. Google Authenticator (2FA) - Google Authenticator login
|
@@ -351,6 +389,10 @@ miniOrange authentication service has 15+ authentication methods.One time passco
|
|
351 |
|
352 |
== Changelog ==
|
353 |
|
|
|
|
|
|
|
|
|
354 |
= 5.4.29 =
|
355 |
* Google Authenticator - Two Factor Authentication (2FA, OTP) :
|
356 |
* Session independent Google Authenticator
|
@@ -695,7 +737,7 @@ miniOrange authentication service has 15+ authentication methods.One time passco
|
|
695 |
* Google Authenticator - Two Factor Authentication (2FA) : Bug fix.
|
696 |
|
697 |
= 5.0.0 =
|
698 |
-
* Google Authenticator - Two Factor Authentication (2FA) : New UI Interface, 2
|
699 |
* This is a major release.
|
700 |
|
701 |
= 4.6.2 =
|
@@ -741,7 +783,7 @@ miniOrange authentication service has 15+ authentication methods.One time passco
|
|
741 |
* Google Authenticator - Two Factor Authentication (2FA) : Added Alert Message for SMS Transactions. Fixed Remember Device flow and confliction with themes. Added support for multiple instances of wordpress.
|
742 |
|
743 |
= 4.4.7 =
|
744 |
-
* Google Authenticator - Two Factor Authentication (2FA) : Updated the error message for 2
|
745 |
|
746 |
= 4.4.6 =
|
747 |
* Google Authenticator - Two Factor Authentication (2FA) : Instructions for login in case user get locked out.
|
@@ -840,53 +882,53 @@ miniOrange authentication service has 15+ authentication methods.One time passco
|
|
840 |
Custom login redirection
|
841 |
Authy 2-Factor Authentication as separate authentication method
|
842 |
|
843 |
-
= 4.0.5 = Login into third party apps which support XML-RPC.
|
844 |
|
845 |
-
= 4.0.4 = Added a check of KBA configuration from mobile login.
|
846 |
|
847 |
-
= 4.0.3 = Added Support for Authy 2-Factor Authentication App.
|
848 |
|
849 |
-
= 4.0.2 = Added a check for selection of unique questions during KBA setup.
|
850 |
|
851 |
-
= 4.0.1 = Bug Fix
|
852 |
|
853 |
= 4.0 =
|
854 |
-
* Two Factor Authentication ( 2FA ): Features added.
|
855 |
* KBA as backup method.
|
856 |
* mobile browser support.
|
857 |
* more intuitive UI for woocommerce login.
|
858 |
|
859 |
= 3.8 =
|
860 |
-
* Two Factor Authentication ( 2FA ): Bug Fix.
|
861 |
|
862 |
= 3.7 =
|
863 |
-
* Two Factor Authentication ( 2FA ): Activation of two factor role wise.
|
864 |
|
865 |
= 3.6 =
|
866 |
-
* Two Factor Authentication ( 2FA ): email verification in inline registration flow for all users.
|
867 |
More descriptive setup messages and UI changes.
|
868 |
|
869 |
= 3.5 =
|
870 |
-
* Two Factor Authentication ( 2FA ): Provided mobile login support.
|
871 |
|
872 |
= 3.4 =
|
873 |
-
* Two Factor Authentication ( 2FA ): Features added
|
874 |
* Inline registration flow for users.
|
875 |
* Security Questions (KBA) as additional method
|
876 |
* Alternate way of user identification in customer creation.
|
877 |
* premium customizable features.
|
878 |
|
879 |
= 3.3 =
|
880 |
-
* Two Factor Authentication ( 2FA ): Fix the issue of session for some versions of php.
|
881 |
|
882 |
= 3.2 =
|
883 |
-
* Two Factor Authentication ( 2FA ): Fix for device-id compatibility.
|
884 |
|
885 |
= 3.1 =
|
886 |
-
* Two Factor Authentication ( 2FA ): Fix for 2FA ShortCode.
|
887 |
|
888 |
= 3.0 =
|
889 |
-
* Two Factor Authentication ( 2FA ): Features added
|
890 |
* Google Authenticator.
|
891 |
* Device Id (Remember device).
|
892 |
* Choice given to admin to enable specific authentication methods for users.
|
@@ -895,55 +937,59 @@ More descriptive setup messages and UI changes.
|
|
895 |
* More intuitive UI and descriptive instructions.
|
896 |
|
897 |
= 2.6 =
|
898 |
-
* Two Factor Authentication ( 2FA ): Fix the compatibility issues of user session with other security plugins.
|
899 |
|
900 |
= 2.5 =
|
901 |
-
* Two Factor Authentication ( 2FA ): Fix the compatibility issues with All In One WP Security & Firewall plugin.
|
902 |
|
903 |
= 2.4 =
|
904 |
-
* Two Factor Authentication ( 2FA ): UI fixes for admin media library dashboard.
|
905 |
|
906 |
= 2.3 =
|
907 |
-
* Two Factor Authentication ( 2FA ): More descriptive setup messages, more intuitive UI.
|
908 |
|
909 |
= 2.2 =
|
910 |
-
* Two Factor Authentication ( 2FA ): Fixed css issues for existing users
|
911 |
|
912 |
= 2.1 =
|
913 |
-
* Two Factor Authentication ( 2FA ): Added support for multiple Two Factor Choices like OTP Over SMS, Phone Call Verification, Push Notification, Soft Token (like Google Authenticator Code), Email Verification, etc.
|
914 |
|
915 |
= 2.0 =
|
916 |
-
* Two Factor Authentication ( 2FA ): Added login with password plus second factor feature.
|
917 |
|
918 |
= 1.8 =
|
919 |
-
* Two Factor Authentication ( 2FA ): Added feature of different login form choice,test authentication and help for configuration and setup.
|
920 |
|
921 |
= 1.7 =
|
922 |
-
* Bug Fixes Two Factor Authentication ( 2FA ): Modifying login screen adaptable to user's login form
|
923 |
|
924 |
= 1.6 =
|
925 |
-
* Bug Fixes Two Factor Authentication ( 2FA ): fetching 2 factor configuration when activating the plugin after deactivating it.
|
926 |
|
927 |
= 1.5 =
|
928 |
-
* Bug Fixes Two Factor Authentication ( 2FA ): Login issues and password save issues resolved
|
929 |
|
930 |
= 1.4 =
|
931 |
-
* Bug Fixes Two Factor Authentication ( 2FA ): Authentication was not working on some version of php.
|
932 |
|
933 |
= 1.3 =
|
934 |
-
* Bug Fixes
|
935 |
|
936 |
= 1.2 =
|
937 |
-
* Two Factor Authentication ( 2FA ): Added 2 factor for all users along with forgot phone functionality.
|
938 |
|
939 |
= 1.1 =
|
940 |
-
* Two Factor Authentication ( 2FA ): Added email ID verification during registration.
|
941 |
|
942 |
= 1.0.0 =
|
943 |
-
* First version of Two Factor Authentication ( 2FA ) plugin supported with mobile auhthentication for admin only.
|
944 |
|
945 |
== Upgrade Notice ==
|
946 |
|
|
|
|
|
|
|
|
|
947 |
= 5.4.29 =
|
948 |
* Google Authenticator - Two Factor Authentication (2FA, OTP) :
|
949 |
* Session independent Google Authenticator
|
@@ -1318,7 +1364,7 @@ More descriptive setup messages and UI changes.
|
|
1318 |
|
1319 |
= 4.4 =
|
1320 |
* Google Authenticator - Two Factor Authentication (2FA):
|
1321 |
-
* Note: This is very important update having altogether new UI and compatibility with Limit Login Attempts. After updating, please do not logout from your admin dashboard. Try to login from another browser and if you face any issue , please contact us at info@
|
1322 |
* Compatibility with Limit Login Attempts.
|
1323 |
* New User Interface for login.
|
1324 |
|
@@ -1347,112 +1393,112 @@ More descriptive setup messages and UI changes.
|
|
1347 |
* Google Authenticator - Two Factor Authentication (2FA, MFA): Updated faq for limit login attempt type of plugins.
|
1348 |
|
1349 |
= 4.2.3 =
|
1350 |
-
* Two Factor Authentication ( 2FA ):
|
1351 |
* Improved Error handling during Account Creation.
|
1352 |
|
1353 |
= 4.2.2 =
|
1354 |
-
* Two Factor Authentication ( 2FA ):
|
1355 |
* Registration Flow fixes
|
1356 |
|
1357 |
= 4.2.1 =
|
1358 |
-
* Two Factor Authentication ( 2FA ):
|
1359 |
* Change of status during login with phone flow and tested with WP 4.5
|
1360 |
|
1361 |
= 4.2.0 =
|
1362 |
-
* Two Factor Authentication ( 2FA ):
|
1363 |
* Mark as tested on Wordpress 4.5
|
1364 |
|
1365 |
= 4.1.8 =
|
1366 |
-
* Two Factor Authentication ( 2FA ):
|
1367 |
* Changed the location of images used for demo. Now being loaded from the site having SSL certificate.
|
1368 |
|
1369 |
= 4.1.7 =
|
1370 |
-
* Two Factor Authentication ( 2FA ):
|
1371 |
* Improved Error Handling for Remember Device.
|
1372 |
|
1373 |
= 4.1.6 =
|
1374 |
-
* Two Factor Authentication (
|
1375 |
* Licensing Plan Updated.
|
1376 |
|
1377 |
= 4.1.5 =
|
1378 |
-
* Two Factor Authentication ( 2FA ):
|
1379 |
* Added Forgot Password functionality for miniOrange customer admin.
|
1380 |
* Added warning message for the users who are using lower version of php.
|
1381 |
* Added functionality to change the customer email.
|
1382 |
|
1383 |
= 4.1.4 =
|
1384 |
-
* Two Factor Authentication ( 2FA ):
|
1385 |
* Added an option for admin to enable or disable login for XML-RPC supported applications.
|
1386 |
|
1387 |
= 4.1.3 =
|
1388 |
-
* Two Factor Authentication ( 2FA ):
|
1389 |
* Fixed CSS Conflict with the plugins in the admin dashboard.
|
1390 |
* More intuitive UI for woocommerce login.
|
1391 |
* Tested front-end login with themes like wordpress default theme,
|
1392 |
customizr theme,zerif-lite theme,accesspress store theme,ishop theme and many more.
|
1393 |
|
1394 |
= 4.1.2 =
|
1395 |
-
* Two Factor Authentication ( 2FA ): Google Authenticator for Windows phone
|
1396 |
* Fixed CSS conflict with front-end of site if woocommerce is not enabled.
|
1397 |
|
1398 |
= 4.1.1 =
|
1399 |
-
* Two Factor Authentication ( 2FA ): Adding Validation in choosing Security Questions (KBA).
|
1400 |
|
1401 |
= 4.1.0 =
|
1402 |
-
* Two Factor Authentication ( 2FA ): Features added.
|
1403 |
multisite support
|
1404 |
Custom login redirection
|
1405 |
Authy 2-Factor Authentication as separate authentication method
|
1406 |
|
1407 |
-
= 4.0.6 = Added multisite support and custom redirection after login feature.
|
1408 |
|
1409 |
-
= 4.0.5 = Login into third party apps which support XML-RPC.
|
1410 |
|
1411 |
-
= 4.0.4 = Added a check of KBA configuration from mobile login.
|
1412 |
|
1413 |
-
= 4.0.3 = Added Support for Authy 2-Factor Authentication App.
|
1414 |
|
1415 |
-
= 4.0.2 = Added a check for selection of unique questions during KBA setup.
|
1416 |
|
1417 |
-
= 4.0.1 = Bug Fix
|
1418 |
|
1419 |
= 4.0 =
|
1420 |
-
* Two Factor Authentication ( 2FA ): Features added.
|
1421 |
* KBA as backup method.
|
1422 |
* mobile browser support.
|
1423 |
* more intuitive UI for woocommerce login.
|
1424 |
|
1425 |
= 3.8 =
|
1426 |
-
* Two Factor Authentication (
|
1427 |
|
1428 |
= 3.7 =
|
1429 |
-
* Two Factor Authentication ( 2FA ): Activation of two factor role wise.
|
1430 |
|
1431 |
= 3.6 =
|
1432 |
-
* Two Factor Authentication ( 2FA ): email verification in inline registration flow for all users.
|
1433 |
More descriptive setup messages and UI changes.
|
1434 |
|
1435 |
= 3.5 =
|
1436 |
-
* Two Factor Authentication ( 2FA ): Provided mobile login support.
|
1437 |
|
1438 |
= 3.4 =
|
1439 |
-
* Two Factor Authentication ( 2FA ): Features added
|
1440 |
* Inline registration flow for users.
|
1441 |
* Security Questions (KBA) as additional method
|
1442 |
* Alternate way of user identification in customer creation.
|
1443 |
* premium customizable features.
|
1444 |
|
1445 |
= 3.3 =
|
1446 |
-
* Two Factor Authentication ( 2FA ): Fix the issue of session for some versions of php.
|
1447 |
|
1448 |
= 3.2 =
|
1449 |
-
* Two Factor Authentication ( 2FA ): Fix for device-id compatibility.
|
1450 |
|
1451 |
= 3.1 =
|
1452 |
-
* Two Factor Authentication (
|
1453 |
|
1454 |
= 3.0 =
|
1455 |
-
* Two Factor Authentication ( 2FA ): Features added
|
1456 |
* Google Authenticator.
|
1457 |
* Device Id (Remember device).
|
1458 |
* Choice given to admin to enable specific authentication methods for users.
|
@@ -1461,49 +1507,49 @@ More descriptive setup messages and UI changes.
|
|
1461 |
* More intuitive UI and descriptive instructions.
|
1462 |
|
1463 |
= 2.6 =
|
1464 |
-
* Two Factor Authentication ( 2FA ): Fix the compatibility issues of user session with other security plugins.
|
1465 |
|
1466 |
= 2.5 =
|
1467 |
-
* Two Factor Authentication ( 2FA ): Fix the compatibility issues with All In One WP Security & Firewall plugin.
|
1468 |
|
1469 |
= 2.4 =
|
1470 |
-
* Two Factor Authentication ( 2FA ): UI fixes for admin media library dashboard.
|
1471 |
|
1472 |
= 2.3 =
|
1473 |
-
* Two Factor Authentication ( 2FA ): More descriptive setup messages, more intuitive UI.
|
1474 |
|
1475 |
= 2.2 =
|
1476 |
-
* Two Factor Authentication ( 2FA ): Fixed css issues for existing users
|
1477 |
|
1478 |
= 2.1 =
|
1479 |
-
* Two Factor Authentication ( 2FA ): Added support for multiple Two Factor Choices like OTP Over SMS, Phone Call Verification, Push Notification, Soft Token (like Google Authenticator Code), Email Verification, etc.
|
1480 |
|
1481 |
= 2.0 =
|
1482 |
-
* Two Factor Authentication ( 2FA ): Added login with password plus second factor feature.
|
1483 |
|
1484 |
= 1.8 =
|
1485 |
-
* Two Factor Authentication ( 2FA ): Added feature of different login form choice,test authentication and help for configuration and setup.
|
1486 |
|
1487 |
= 1.7 =
|
1488 |
-
* Bug Fixes Two Factor Authentication ( 2FA ): Modifying login screen adaptable to user's login form
|
1489 |
|
1490 |
= 1.6 =
|
1491 |
-
* Bug Fixes Two Factor Authentication ( 2FA ): fetching 2 factor configuration when activating the plugin after deactivating it.
|
1492 |
|
1493 |
= 1.5 =
|
1494 |
-
* Bug Fixes Two Factor Authentication ( 2FA ): Login issues and password save issues resolved
|
1495 |
|
1496 |
= 1.4 =
|
1497 |
-
* Bug Fixes Two Factor Authentication ( 2FA ): Authentication was not working on some version of php.
|
1498 |
|
1499 |
= 1.3 =
|
1500 |
-
* Bug Fixes
|
1501 |
|
1502 |
= 1.2 =
|
1503 |
-
* Two Factor Authentication ( 2FA ): Added 2 factor for all users along with forgot phone functionality.
|
1504 |
|
1505 |
= 1.1 =
|
1506 |
-
* Two Factor Authentication ( 2FA ): Added email ID verification during registration.
|
1507 |
|
1508 |
= 1.0.0 =
|
1509 |
First version of Two Factor Authentication ( 2FA ) plugin.
|
1 |
=== Google Authenticator - WordPress Two Factor Authentication (2FA , MFA) ===
|
2 |
|
3 |
Contributors: cyberlord92, twofactor, hsn97
|
4 |
+
Tags: google authenticator, two factor authentication, two factor, 2FA, two-step verification, mobile verification, OTP, mobile verification, two factor, Two step verification, TFA, MFA, 2 factor authentication, Remember Device, OTP,WordPress otp, two step authentication,Clef,SMS, email, signup security, two factor auth, Mobile Authentication, strong authentication, 2 step authentication, mobile verification,Multifactor authentication, passwordless login, one time passcode, soft token Authentication, QR Code Authentication, email verification, KBA, Security Questions,2FA, login OTP, login with SMS, mobile login, phone login, OTP login, mobile verification,knowledge based authentication,authy, authy two factor,yubico,Two-Factor Authentication,WordPress otp, security,user security, Twilio WordPress, SMS gateway, Solutions Infini, Clickatell, BulkSMS, MSG91, Nexmo, SMS Country, message, woocommerce, website security, login security, multi factor authentication, multi factor,wordfence, IP Blocking, IP Whitelisting, login Audits, woocommerce, SMS login, passwordless login, auth, login with OTP WordPress, OTP Over SMS and Email, two-step authentication, Mobile Authentication, passwordless login, login without password, passwordless authentication, secure login, temporary login, temporary access, one time passcode, email verification, security, website security, login security, multi-factor authentication, woocommerce, smartphone, WordPress otp, register with OTP, user OTP verification, SMS OTP, OTP Email, registration with OTP verification, registration verification,smartphone authentication
|
5 |
Donate link: https://miniorange.com/
|
6 |
Requires at least: 3.0.1
|
7 |
Tested up to: 5.6
|
8 |
Requires PHP: 5.3.0
|
9 |
+
Stable tag: 5.4.30
|
10 |
License: GPLv2 or later
|
11 |
License URI: http://www.gnu.org/licenses/gpl-2.0.html
|
12 |
|
13 |
+
Google Authenticator, Two Factor Authentication (2 Factor), OTP verificaion - SMS and Email, Apps like Microsoft, Duo, LastPass & more on login and Registration for all forms. Google AUthenticator also Supports QR Code, Push Notification and Security Questions along with the Google Authenticator itself.
|
14 |
|
15 |
== Description ==
|
16 |
|
17 |
+
Google Authenticator - Two Factor Authentication (2FA) plugin provides a completely Secure login to your WordPress website. Google Authenticator- Two Factor Authentication (2FA) is a FREE, Simple & very easy to setup plugin. Google Authenticator provides two factor authentication (2FA, MFA) whenever login to your WordPress website ensuring no unauthorised access to your website. Google Authenticator can be configured for any TOTP based Authentication Method for providing addtional layer of security of Two Factor Authentication.
|
18 |
|
19 |
= User Identity Verification or OTP Verification =
|
20 |
Login and Registration: Verify users on login and Registration with different authentication methods like Google Authenticator, SMS Verification, Email, Authy Authenticator, Duo Authenticator, Microsoft Authenticator, TOTP Based Authenticator, Security Questions and many others. Easy OTP Verification with SMS Verification and Email Verification.
|
21 |
|
22 |
+
= Google Authenticator and other 2 Factor ( 2FA ) sync on multiple websites =
|
23 |
+
You would not need to configure Google Authenticator and other Two Factor Authentication ( 2FA ) methods from second site onword. Just login with miniOrange account and your 2FA will automatically get set. This is available for Google Authenticator, Duo Authenticator, Microsoft Authenticator, Securty Questions, LastPass, Authy, miniOrange methods, OTP over SMS, OTP over Email. It is supported only if you are using our cloud services of 2 Factor.
|
24 |
|
25 |
+
== Plugin Integrations and Support for all methods of two factor like Google Authenticator ==
|
26 |
* [Woocommerce](https://wordpress.org/plugins/woocommerce/) (Login Woocommerce using Google Authenticator - Two Factor Authentication (2FA))
|
27 |
* [BuddyPress form](https://wordpress.org/plugins/buddypress/) (Login BuddyPress using Google Authenticator - Two Factor Authentication (2FA))
|
28 |
* [bbpress form](https://wordpress.org/plugins/bbpress/) (Login bbpress using Google Authenticator - Two Factor Authentication (2FA))
|
36 |
* [Dokan](https://wordpress.org/plugins/dokan-lite/) (Login Dokan using Google Authenticator - Two Factor Authentication (2FA))
|
37 |
* And many more
|
38 |
|
39 |
+
== WordPress login and registration forms support and integration for all methods of two factor authentication like Google Authenticator ==
|
40 |
* [Restrict Content Pro Form](https://wordpress.org/plugins/restrict-content/) (Register and Login Restrict Content Pro using Google Authenticator - Two Factor Authentication (2FA))
|
41 |
* [My theme Login Form](https://wordpress.org/plugins/theme-my-login/) (Login My theme Login using Google Authenticator - Two Factor Authentication (2FA))
|
42 |
* [User Registration – Custom Registration Form](https://wordpress.org/plugins/bbpress/) (Register and Login User Registration – Custom Registration using Google Authenticator - Two Factor Authentication (2FA))
|
58 |
Others not listed gateway can be tested on our site, Test your Gateway: [Custom Gateway](https://login.xecurify.com/moas/login?redirectUrl=https://login.xecurify.com/moas/admin/customer/smsconfig)
|
59 |
|
60 |
= All Registartion Forms Supported =
|
61 |
+
Google Authenticator - Two factor authentication( 2 Factor ) is available for all Forms. You can enable OTP Verification on all Registration forms and Google Authenticator, Security Questions, Prevent Account Sharing, Push Notifications on all the Login forms to verify users. Use this shortcode for Registration([mo2f_enable_register]). Settings in <b>Two Factor -> Registration Forms</b>.
|
62 |
|
63 |
|
64 |
= FREE Plugin Features =
|
65 |
+
* Simplified & easy user interface to setup Google Authenticator and other Two Factor Authentication ( 2FA ) methods.
|
66 |
* Google Authenticator - Two Factor Authentication (2FA) for **3 User** forever FREE!
|
67 |
+
* **Variety of Two Factor Authentication Methods:** Any App supporting TOTP algorithm like Google Authenticator, Authy Authenticator, LastPass Authenticator, Microsoft Authenticator, QR Code, Push Notification, Soft Token and Security Questions(KBA)
|
68 |
+
* Includes Language Translation Support. Supports a wide variety of languages for all methods of 2 factor like Google Authenticator
|
69 |
+
* Passwordless login or login with phone number, supported for Google Authenticator and other 2 Factor authentication methods.
|
70 |
* This plugin Supports standard TOTP + HOTP protocols for Authentication Methods. Any TOTP protocol based authenticator app can be configured using Google Authenticator option in the plugin.
|
71 |
* Two Factor Authentication (2FA) allows authentication on login page itself for Google Authenticator & miniOrange Soft Token.
|
72 |
* Brute force attack prevention & IP Blocking.
|
73 |
+
* User login Monitorning with and without two-factor authentication(2FA)
|
74 |
+
* RCP Login and Registration Suppport with all login 2 factor methods like Google Authenticator, OTP Over SMS, QR code Authentication, login with Email for Login.
|
75 |
+
* OTP Verification of Ulimate Member Registartion form with methods like OTP Over SMS and Email, QR code Authentication.
|
76 |
+
* Recovery codes in case you are locked out for all Two Factor Authentication (TFA) methods like Google Authenticator, SMS verification,
|
77 |
+
|
78 |
+
= Standard Lite Plugin Features =
|
79 |
+
|
80 |
+
* Google Authenticator - Two Factor Authentication (2FA) for all users and all user roles *( Site-based pricing )*
|
81 |
+
* **Available Two Factor Authentication Methods:** Google Authenticator, Authy Authenticator, Microsoft Authenticator, LastPass Authenticator, Security Questions(KBA), OTP Over Email, OTP Over SMS, Email Verification. *( SMS credits need to be purchased as per the need)*
|
82 |
+
* Includes language Translation Support. Supports wide variety of languages.
|
83 |
+
* **Multiple Login Options:** Username + password + two-factor (or) Username + two-factor i.e. Passwordless login. [Guide](https://docs.miniorange.com/documentation/login-username-2nd-factor-2)
|
84 |
+
* **Unlimitted Email transactions:** Unlimitted Email transactions with your SMTP server.
|
85 |
+
* **Backup Method:** KBA(Security Questions) For all TFA methods like Google Authenticator, etc.
|
86 |
+
* Multisite compatible.
|
87 |
+
* User role based redirection after Login [Guide](https://docs.miniorange.com/documentation/custom-redirect-login-url), Customize account name in Google Authenticator app [Guide](https://docs.miniorange.com/documentation/google-authenticator-app-name)
|
88 |
+
* Custom Security Questions (KBA) [Guide](https://docs.miniorange.com/documentation/custom-security-questions)
|
89 |
+
|
90 |
+
= Premium Lite Plugin Features =
|
91 |
+
|
92 |
+
* Google Authenticator - Two Factor Authentication (2FA) for all users and all user roles *( Site-based pricing )*
|
93 |
+
* **Available Two Factor Authentication Methods:** Google Authenticator, Authy Authenticator, Microsoft Authenticator, LastPass Authenticator, Security Questions(KBA), OTP Over Email, OTP Over SMS, Email Verification, Mobile Verification. *( SMS credits need to be purchased as per the need)*
|
94 |
+
* Includes language Translation Support. Supports wide variety of languages.
|
95 |
+
* **Multiple Login Options:** Username + password + two-factor (or) Username + two-factor i.e. Passwordless login. [Guide](https://docs.miniorange.com/documentation/login-username-2nd-factor-2)
|
96 |
+
* **Unlimitted Email transactions:** Unlimitted Email transactions with your SMTP server.
|
97 |
+
* **Backup Method:** KBA(Security Questions) , OTP Over Email, Backup codes For all Two Factor Authentication ( TFA ) methods like Google Authenticator, etc.
|
98 |
+
* Multisite compatible.
|
99 |
+
* Two Factor Authentication ( TFA ) for Custom login forms like User Pro, login with ajax, Theme my login, etc with all authentication methods like Google Authenticator, mobile Verification with SMS, etc.
|
100 |
+
* User role based redirection after Login [Guide](https://docs.miniorange.com/documentation/custom-redirect-login-url), Customize account name in Google Authenticator app [Guide](https://docs.miniorange.com/documentation/google-authenticator-app-name)
|
101 |
+
* Custom Security Questions (KBA) [Guide](https://docs.miniorange.com/documentation/custom-security-questions)
|
102 |
+
* Role based 2 Factor - Different 2 factor like Google Authenticator, OTP Over SMS and Email, Authy Authenticator, etc based on your role [Guide](https://docs.miniorange.com/documentation/specific-set-authentication-methods-based-role)*
|
103 |
+
* Force Two factor for users [Guide](https://docs.miniorange.com/documentation/enforce-2fa-users)
|
104 |
+
* Email notification to users asking them to set up Two Factor Authentication (2FA) [Guide](https://docs.miniorange.com/documentation/want-send-email-notification-users-setting-2-factor)
|
105 |
+
* Set Privacy Policy for users [Guide](https://docs.miniorange.com/documentation/privacy-policy-site)
|
106 |
+
* App Specific Password to login from mobile Apps
|
107 |
+
* Remember Device for all methods like Google Authenticator, Mobile verification with SMS, etc [Guide](https://docs.miniorange.com/documentation/remember-my-device)
|
108 |
+
* **Add-Ons Included:** RBA & Trusted Devices Management Add-on, Personalization Add-on and Short Codes Add-on
|
109 |
+
|
110 |
|
111 |
= Standard Plugin Features =
|
112 |
|
127 |
* **Multiple Login Options:** Username + password + two-factor (or) Username + two-factor i.e. Passwordless login [Guide](https://docs.miniorange.com/documentation/login-username-2nd-factor-2)
|
128 |
* **Backup Methods:** KBA(Security Questions), OTP Over Email, Backup Codes [Guide](https://docs.miniorange.com/documentation/want-configure-backup-methods-users-can-configure-case-locked-site-not-able-log)
|
129 |
* Multisite compatible.
|
130 |
+
* Force Two factor authentication for users [Guide](https://docs.miniorange.com/documentation/enforce-2fa-users)
|
131 |
* Email notification to users asking them to set up Two Factor Authentication (2FA) [Guide](https://docs.miniorange.com/documentation/want-send-email-notification-users-setting-2-factor)
|
132 |
* User role based redirection after Login [Guide](https://docs.miniorange.com/documentation/custom-redirect-login-url), Custom Security Questions (KBA) [Guide](https://docs.miniorange.com/documentation/custom-security-questions), Customize account name in Google Authenticator app [Guide](https://docs.miniorange.com/documentation/google-authenticator-app-name).
|
133 |
* Enable Google Authenticator - Two Factor Authentication (2FA) for specific Users/User Roles [Guide](https://docs.miniorange.com/documentation/enable-two-factor-based-roles)
|
134 |
+
* Choose specific two factor authentication methods for Users [Guide](https://docs.miniorange.com/documentation/specific-set-authentication-methods-based-role)
|
135 |
* Set Privacy Policy for users [Guide](https://docs.miniorange.com/documentation/privacy-policy-site)
|
136 |
* App Specific Password to login from mobile Apps
|
137 |
+
* Remember Device to skip the two factor authentication( 2FA ) for trusted devices [Guide](https://docs.miniorange.com/documentation/remember-my-device)
|
138 |
* **Add-Ons Included:** RBA & Trusted Devices Management Add-on, Personalization Add-on and Short Codes Add-on
|
139 |
|
140 |
= Enterprise Plugin Features =
|
142 |
* Google Authenticator - Two Factor Authentication (2FA) for Users as per the upgrade *( User-based pricing )*
|
143 |
* **Available Authentication Methods:** Google Authenticator, Authy Authenticator, Microsoft Authenticator, LastPass Authenticator, QR Code, Push Notification, Soft Token, Security Questions(KBA), OTP Over Email, OTP Over SMS, OTP Over SMS and Email, Email Verification, Hardware Token. *( SMS and Email credits need to be purchased as per the need)*
|
144 |
* Language Translation Support
|
145 |
+
* **Multiple Login Options:** Username + password + two factor Authentication (or) Username + two factor authentication i.e. Passwordless login.
|
146 |
* **Backup Methods:** KBA(Security Questions), OTP Over Email, Backup Codes
|
147 |
* Multisite compatible.
|
148 |
* Email notification to users asking them to set up Google Authenticator - Two Factor Authentication (2FA).
|
149 |
* User role based redirection after Login, Custom Security Questions (KBA), Customize account name in Google Authenticator app.
|
150 |
* Enable Two Factor Authentication (2FA) for specific Users/User Roles
|
151 |
+
* Choose specific two factor authentication methods for Users
|
152 |
* App Specific Password to login from mobile Apps
|
153 |
* **Add-Ons Included:** RBA & Trusted Devices Management Add-on, Personalization Add-on and Short Codes Add-on
|
154 |
* **Brute force attack prevention, IP Blocking & User login Monitorning. **
|
155 |
* File protection & strong password
|
156 |
+
* Monitorning current two factor authentication (2 Factor) method of all the users in the plugin.
|
157 |
= PASSWORDLESS LOGIN =
|
158 |
+
Passwordless login is a new way of login in which you and your users can login without entering the password. The login can be done by username and 2 factor or only username which can be decided based on the user role. If a role is not allowed for passwordless login they will login with password and username.
|
159 |
|
160 |
== Prevent Account Sharing Between Users ==
|
161 |
+
Many video sharing and E-learning platforms want to prevent sharing of account between the users. This can be done using miniOrange Two factor plugin (TFA) with methods like QR code Authentication , Mobile Verification, etc. Also, e-learning portals can use this to their advantage. It can be used on any websites which create and sell courses. It can be integrated with plugins like Learndash.
|
162 |
+
Other sites like premium video content or any premium content where you want users not to share passwords between friends and Family then you can go for this solution. Multiple two factor authentication methods are supported to achieve prevent account sharing.
|
163 |
|
164 |
+
= Additional Features other than the two factor authentication ( 2FA ) =
|
165 |
* **Complete Web Security suite to protect wordpress from any attacks**
|
166 |
* **Web Application Firewall (WAF) : Wordpress Firewall to protect your site**
|
167 |
* **OWASP TOP 10 Protection**
|
188 |
|
189 |
= Why do you need to register? =
|
190 |
|
191 |
+
miniOrange Two factor authentication Plugin (TFA) uses miniOrange APIs to communicate between your WP and miniOrange. To keep this communication secure, we ask you to register and assign you API keys specific to your account. This way your account and users calls can be only accessed by API keys assigned to you.
|
192 |
+
Adding to this, you can also use the same account on multiple applications and your users do not have to maintain multiple accounts or 2 factor like Google Authenticator. Single code generated in Google Authenticator will be enough to login to all sites. With this you can also achieve sync of 2 factor authentication on multiple sites.
|
193 |
+
|
194 |
|
195 |
= Add Ons [Applicable for Free and Standard Plans, Inclusive in the Premium Plan] =
|
196 |
|
197 |
* RBA & Trusted Devices Management Add-on Features
|
198 |
+
* Remember Device to skip the two factor authentication ( 2 Factor ) from the trusted devices.
|
199 |
* Set Device Limit for the users to login
|
200 |
* IP Restriction: Limit users to login from specific IPs
|
201 |
+
* Personalization Add-on Features to customize your 2 factor authentication pages
|
202 |
* Custom UI of Two Factor Authentication (2FA) popups
|
203 |
* Custom Email and SMS Templates
|
204 |
+
* Customize 'Powered by' Logo on two factor authentication page
|
205 |
* Customize Plugin Icon
|
206 |
* Customize Plugin Name
|
207 |
|
208 |
* Short Codes Add-on Features
|
209 |
+
* Option to turn on/off 2 factor (two factor authentication) by user
|
210 |
* Option to configure the Google Authenticator and Security Questions by user
|
211 |
+
* Option to 'Enable Remember Device' from a custom login form to skip 2 factor for trusted devices.
|
212 |
+
* On-Demand ShortCodes for specific functionalities ( like for enabling 2FA (2 Factor authentication) for specific pages)
|
213 |
|
214 |
+
= Apps Supported by the two factor authentication plugin =
|
215 |
* Google Authenticator
|
216 |
* miniOrange Authenticator
|
217 |
* Duo Authenticator
|
218 |
* Microsoft Authenticator
|
219 |
+
* Authy 2 Factor Authenticator
|
220 |
* LastPass Authenticator
|
221 |
* FreeOTP Authenticator
|
222 |
|
223 |
+
<h4>Useful blog posts about two factor authenticaion ( 2FA ) plugin </h4>
|
224 |
+
*[Beginner’s Guide: How to Add Two Factor Authentication to WordPress](https://themeisle.com/blog/how-to-add-two-factor-authentication-to-wordpress/)
|
225 |
+
*[How to Add WordPress Two Factor Authentication (2FA)](https://phppot.com/wordpress/how-to-add-wordpress-two-factor-authentication-2fa-using-google-authenticator-plugin/)
|
226 |
|
227 |
+
Customized solutions and Active support is available. Email us at info@xecurify.com or call us at +1 9786589387.
|
228 |
|
229 |
**Note: The plugin is GDPR Compliant and supports wide variety of Language Translation**
|
230 |
|
241 |
3. Activate miniOrange 2 Factor Authentication from the Plugins tab of your admin dashboard.
|
242 |
|
243 |
= Once Activated =
|
244 |
+
1. Select miniOrange 2-Factor ( 2 factor authentication ) from the left menu and follow the instructions.
|
245 |
2. Once, you complete your setup. Click on Log Out button.
|
246 |
3. Enter the username and password. After the initial validation, you will be prompted for the 2-factor method you had set up.
|
247 |
4. Validate yourself with the 2-factor authentication method you configured.
|
264 |
You can also check our video Tutorial:
|
265 |
<iframe width="560" height="315" src="https://www.youtube.com/embed/wLFKakQkpk8" frameborder="0" allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen></iframe>
|
266 |
|
267 |
+
= I want to enable Google Authenticator 2 Factor authentication as the backup method? =
|
268 |
+
|
269 |
+
You can use google authenticator as the backup method for your specific user or all users in the premium version of the two factor authentication. [PREMIUM FEATURE]
|
270 |
+
|
271 |
+
= I want to enable Two Factor Authentication (2FA) role wise ? =
|
272 |
|
273 |
+
You can select the roles under Login Settings tab to enable the plugin role wise. [PREMIUM FEATURE]
|
274 |
|
275 |
= I have enabled Two-Factor Authentication (2FA) for all users, what happens if an end user tries to login but has not yet registered ? =
|
276 |
|
278 |
|
279 |
= I want to enable only one authentication method for my users. What shloud I do? =
|
280 |
|
281 |
+
You can select the two factor authentication methods under Login Settings tab. The selected authentication methods will be shown to the user during inline registration for example if you select Google Authenticator it will be shown on login. [PREMIUM FEATURE]
|
282 |
|
283 |
= I am getting the fatal error of call to undefined function json_last_error(). What should I do? =
|
284 |
|
286 |
|
287 |
= I did not recieve OTP while trying to register with miniOrange. What should I do? =
|
288 |
|
289 |
+
The OTP is sent to your email address with which you have registered with miniOrange. If you can't see the email from miniOrange in your mails, please make sure to check your SPAM folder. If you don't see an email even in SPAM folder, please submit a query in our Support Section in the plugin or you can contact us at info@xecurify.com.
|
290 |
|
291 |
= I want to configure 2nd factor by Google Authenticator. =
|
292 |
|
305 |
|
306 |
= I have a custom / front-end login page on my site and I want the look and feel to remain the same when I add 2 factor ? =
|
307 |
|
308 |
+
If you have a custom login form other than wp-login.php then we will provide you the shortcode. Shortcode will work only for the customized login page created from wordpress plugins. We are not claiming that it will work with all the customized login page. In such case, custom work is needed to integrate two factor with your customized login page. You can submit a query in our <b>Support Section</b> in the plugin or you can contact us at info@xecurify.com for more details.
|
309 |
|
310 |
= I have Woocommerce theme login page on my site. How can I enable Two Factor ? =
|
311 |
|
312 |
+
If you have Woocommerce theme login then go to Advanced Options Tab and check Enable Two-Factor for Woocommerce Front End Login. If you need any help setting up 2-Factor for your Woocommerce theme login form, please submit a query in our Support Section in the plugin or you can contact us at info@xecurify.com.
|
313 |
|
314 |
= I have installed plugins which limit the login attempts like Limit Login Attempt, Loginizer, Wordfence etc. Is there any incompatibilities with these kind of plugins? =
|
315 |
|
317 |
|
318 |
= If you are using any Security Plugin in WordPress like Simple Security Firewall, All in One WP Security Plugin and you are not able to login with Two-Factor. =
|
319 |
|
320 |
+
Our Two-Factor plugin is compatible with most of the security plugins, but if it is not working for you. Please submit a query in our Support Section in the plugin or you can contact us at info@xecurify.com.
|
321 |
|
322 |
= If you are using any render blocking javascript and css plugin like Async JS and CSS Plugin and you are not able to login with Two-Factor or your screen got blank. =
|
323 |
|
324 |
+
If you are using Async JS and CSS Plugin. Please go to its settings and add jquery in the list of exceptions and save settings. It will work. If you are still not able to get it right, Please submit a query in our Support Section in the plugin or you can contact us at info@xecurify.com.
|
325 |
|
326 |
= My users have different types of phones. What phones are supported? =
|
327 |
|
362 |
|
363 |
= My phone has no internet connectivity and i am entering the one time passcode from miniOrange Authenticator App, it says Invalid OTP?
|
364 |
|
365 |
+
Click on the <b>Settings Icon</b> on top right corner in <b>miniOrange Authenticator App</b> and then press <b>Sync button</b> under 'Time correction for codes' to sync your time with miniOrange Servers. If you still can't logged in then please email us at info@xecurify.com or <a href="https://miniorange.com/contact" target="_blank">Contact us</a>.Soft Token method is just like google authenticator method.
|
366 |
|
367 |
= I want to go back to default login with password? =
|
368 |
|
374 |
|
375 |
= What If I want to use any other second factor like OTP Over SMS, Security Questions, Device Id, etc ? =
|
376 |
|
377 |
+
miniOrange authentication service has 15+ authentication methods.One time passcodes (OTP) over SMS, OTP over Email, OTP over SMS and Email, Out of Band SMS, Out of Band Email, Soft Token, Push Notification, USB based Hardware token (yubico), Security Questions, Mobile Authentication (QR Code Authentication), Voice Authentication (Biometrics), Phone Verification, Device Identification, Location, Time of Access User Behavior. To know more about authentication methods, please visit <a href="https://miniorange.com/strong_auth" target="_blank">https://miniorange.com/strong_auth </a>. If you want to have any other 2-factor for your WordPress site, please email us at info@xecurify.com or <a href="https://miniorange.com/contact" target="_blank">Contact us</a>.
|
378 |
|
379 |
== Screenshots ==
|
380 |
|
381 |
+
1. Google Authenticator (2FA) - Setup different 2 Factor methods
|
382 |
2. Google Authenticator (2FA) - Test 2 factor configured
|
383 |
3. Google Authenticator (2FA) - 2 Factor Authentication methods available
|
384 |
4. Google Authenticator (2FA) - Google Authenticator login
|
389 |
|
390 |
== Changelog ==
|
391 |
|
392 |
+
= 5.4.30=
|
393 |
+
* Google Authenticator - Two Factor Authentication (2FA, OTP) :
|
394 |
+
* Feedback changes
|
395 |
+
|
396 |
= 5.4.29 =
|
397 |
* Google Authenticator - Two Factor Authentication (2FA, OTP) :
|
398 |
* Session independent Google Authenticator
|
737 |
* Google Authenticator - Two Factor Authentication (2FA) : Bug fix.
|
738 |
|
739 |
= 5.0.0 =
|
740 |
+
* Google Authenticator - Two Factor Authentication (2FA) : New UI Interface, 2 factor authentication for Unlimited Users.
|
741 |
* This is a major release.
|
742 |
|
743 |
= 4.6.2 =
|
783 |
* Google Authenticator - Two Factor Authentication (2FA) : Added Alert Message for SMS Transactions. Fixed Remember Device flow and confliction with themes. Added support for multiple instances of wordpress.
|
784 |
|
785 |
= 4.4.7 =
|
786 |
+
* Google Authenticator - Two Factor Authentication (2FA) : Updated the error message for 2 factor configuration.
|
787 |
|
788 |
= 4.4.6 =
|
789 |
* Google Authenticator - Two Factor Authentication (2FA) : Instructions for login in case user get locked out.
|
882 |
Custom login redirection
|
883 |
Authy 2-Factor Authentication as separate authentication method
|
884 |
|
885 |
+
= 4.0.5 = Google Authenticator - Two Factor Authentication ( 2 Factor) : Login into third party apps which support XML-RPC.
|
886 |
|
887 |
+
= 4.0.4 = Google Authenticator - Two Factor Authentication ( 2 Factor) : Added a check of KBA configuration from mobile login.
|
888 |
|
889 |
+
= 4.0.3 = Google Authenticator - Two Factor Authentication ( 2 Factor) : Added Support for Authy 2-Factor Authentication App.
|
890 |
|
891 |
+
= 4.0.2 = Google Authenticator - Two Factor Authentication ( 2 Factor) : Added a check for selection of unique questions during KBA setup.
|
892 |
|
893 |
+
= 4.0.1 = Bug Fix Google Authenticator - Two Factor Authentication ( 2 Factor)
|
894 |
|
895 |
= 4.0 =
|
896 |
+
* Google Authenticator - Two Factor Authentication ( 2FA ): Features added.
|
897 |
* KBA as backup method.
|
898 |
* mobile browser support.
|
899 |
* more intuitive UI for woocommerce login.
|
900 |
|
901 |
= 3.8 =
|
902 |
+
* Google Authenticator - Two Factor Authentication ( 2FA ): Bug Fix.
|
903 |
|
904 |
= 3.7 =
|
905 |
+
* Google Authenticator - Two Factor Authentication ( 2FA ): Activation of two factor role wise.
|
906 |
|
907 |
= 3.6 =
|
908 |
+
* Google Authenticator - Two Factor Authentication ( 2FA ): email verification in inline registration flow for all users.
|
909 |
More descriptive setup messages and UI changes.
|
910 |
|
911 |
= 3.5 =
|
912 |
+
* Google Authenticator - Two Factor Authentication ( 2FA ): Provided mobile login support.
|
913 |
|
914 |
= 3.4 =
|
915 |
+
* Google Authenticator - Two Factor Authentication ( 2FA ): Features added
|
916 |
* Inline registration flow for users.
|
917 |
* Security Questions (KBA) as additional method
|
918 |
* Alternate way of user identification in customer creation.
|
919 |
* premium customizable features.
|
920 |
|
921 |
= 3.3 =
|
922 |
+
* Google Authenticator - Two Factor Authentication ( 2FA ): Fix the issue of session for some versions of php.
|
923 |
|
924 |
= 3.2 =
|
925 |
+
* Google Authenticator - Two Factor Authentication ( 2FA ): Fix for device-id compatibility.
|
926 |
|
927 |
= 3.1 =
|
928 |
+
* Google Authenticator - Two Factor Authentication ( 2FA ): Fix for 2FA ShortCode.
|
929 |
|
930 |
= 3.0 =
|
931 |
+
* Google Authenticator - Two Factor Authentication ( 2FA ): Features added
|
932 |
* Google Authenticator.
|
933 |
* Device Id (Remember device).
|
934 |
* Choice given to admin to enable specific authentication methods for users.
|
937 |
* More intuitive UI and descriptive instructions.
|
938 |
|
939 |
= 2.6 =
|
940 |
+
* Google Authenticator - Two Factor Authentication ( 2FA ): Fix the compatibility issues of user session with other security plugins.
|
941 |
|
942 |
= 2.5 =
|
943 |
+
* Google Authenticator - Two Factor Authentication ( 2FA ): Fix the compatibility issues with All In One WP Security & Firewall plugin.
|
944 |
|
945 |
= 2.4 =
|
946 |
+
* Google Authenticator - Two Factor Authentication ( 2FA ): UI fixes for admin media library dashboard.
|
947 |
|
948 |
= 2.3 =
|
949 |
+
* Google Authenticator - Two Factor Authentication ( 2FA ): More descriptive setup messages, more intuitive UI.
|
950 |
|
951 |
= 2.2 =
|
952 |
+
* Google Authenticator - Two Factor Authentication ( 2FA ): Fixed css issues for existing users
|
953 |
|
954 |
= 2.1 =
|
955 |
+
* Google Authenticator - Two Factor Authentication ( 2FA ): Added support for multiple Two Factor Choices like OTP Over SMS, Phone Call Verification, Push Notification, Soft Token (like Google Authenticator Code), Email Verification, etc.
|
956 |
|
957 |
= 2.0 =
|
958 |
+
* Google Authenticator - Two Factor Authentication ( 2FA ): Added login with password plus second factor feature.
|
959 |
|
960 |
= 1.8 =
|
961 |
+
* Google Authenticator - Two Factor Authentication ( 2FA ): Added feature of different login form choice,test authentication and help for configuration and setup.
|
962 |
|
963 |
= 1.7 =
|
964 |
+
* Bug Fixes Google Authenticator - Two Factor Authentication ( 2FA ): Modifying login screen adaptable to user's login form
|
965 |
|
966 |
= 1.6 =
|
967 |
+
* Bug Fixes Google Authenticator - Two Factor Authentication ( 2FA ): fetching 2 factor configuration when activating the plugin after deactivating it.
|
968 |
|
969 |
= 1.5 =
|
970 |
+
* Bug Fixes Google Authenticator - Two Factor Authentication ( 2FA ): Login issues and password save issues resolved
|
971 |
|
972 |
= 1.4 =
|
973 |
+
* Bug Fixes Google Authenticator - Two Factor Authentication ( 2FA ): Authentication was not working on some version of php.
|
974 |
|
975 |
= 1.3 =
|
976 |
+
* Bug Fixes Google Authenticator - Two Factor Authentication ( 2 Factor )
|
977 |
|
978 |
= 1.2 =
|
979 |
+
* Google Authenticator - Two Factor Authentication ( 2FA ): Added 2 factor for all users along with forgot phone functionality.
|
980 |
|
981 |
= 1.1 =
|
982 |
+
* Google Authenticator - Two Factor Authentication ( 2FA ): Added email ID verification during registration.
|
983 |
|
984 |
= 1.0.0 =
|
985 |
+
* First version of Google Authenticator - Two Factor Authentication ( 2FA ) plugin supported with mobile auhthentication for admin only.
|
986 |
|
987 |
== Upgrade Notice ==
|
988 |
|
989 |
+
= 5.4.30=
|
990 |
+
* Google Authenticator - Two Factor Authentication (2FA, OTP) :
|
991 |
+
* Feedback changes
|
992 |
+
|
993 |
= 5.4.29 =
|
994 |
* Google Authenticator - Two Factor Authentication (2FA, OTP) :
|
995 |
* Session independent Google Authenticator
|
1364 |
|
1365 |
= 4.4 =
|
1366 |
* Google Authenticator - Two Factor Authentication (2FA):
|
1367 |
+
* Note: This is very important update having altogether new UI and compatibility with Limit Login Attempts. After updating, please do not logout from your admin dashboard. Try to login from another browser and if you face any issue , please contact us at info@xecurify.com
|
1368 |
* Compatibility with Limit Login Attempts.
|
1369 |
* New User Interface for login.
|
1370 |
|
1393 |
* Google Authenticator - Two Factor Authentication (2FA, MFA): Updated faq for limit login attempt type of plugins.
|
1394 |
|
1395 |
= 4.2.3 =
|
1396 |
+
* Google Authenticator - Two Factor Authentication ( 2FA ):
|
1397 |
* Improved Error handling during Account Creation.
|
1398 |
|
1399 |
= 4.2.2 =
|
1400 |
+
* Google Authenticator - Two Factor Authentication ( 2FA ):
|
1401 |
* Registration Flow fixes
|
1402 |
|
1403 |
= 4.2.1 =
|
1404 |
+
* Google Authenticator - Two Factor Authentication ( 2FA ):
|
1405 |
* Change of status during login with phone flow and tested with WP 4.5
|
1406 |
|
1407 |
= 4.2.0 =
|
1408 |
+
* Google Authenticator - Two Factor Authentication ( 2FA ):
|
1409 |
* Mark as tested on Wordpress 4.5
|
1410 |
|
1411 |
= 4.1.8 =
|
1412 |
+
* Google Authenticator - Two Factor Authentication ( 2FA ):
|
1413 |
* Changed the location of images used for demo. Now being loaded from the site having SSL certificate.
|
1414 |
|
1415 |
= 4.1.7 =
|
1416 |
+
* Google Authenticator - Two Factor Authentication ( 2FA ):
|
1417 |
* Improved Error Handling for Remember Device.
|
1418 |
|
1419 |
= 4.1.6 =
|
1420 |
+
* Google Authenticator - Two Factor Authentication ( 2 Factor ):
|
1421 |
* Licensing Plan Updated.
|
1422 |
|
1423 |
= 4.1.5 =
|
1424 |
+
* Google Authenticator - Two Factor Authentication ( 2FA ):
|
1425 |
* Added Forgot Password functionality for miniOrange customer admin.
|
1426 |
* Added warning message for the users who are using lower version of php.
|
1427 |
* Added functionality to change the customer email.
|
1428 |
|
1429 |
= 4.1.4 =
|
1430 |
+
* Google Authenticator - Two Factor Authentication ( 2FA ):
|
1431 |
* Added an option for admin to enable or disable login for XML-RPC supported applications.
|
1432 |
|
1433 |
= 4.1.3 =
|
1434 |
+
* Google Authenticator - Two Factor Authentication ( 2FA ):
|
1435 |
* Fixed CSS Conflict with the plugins in the admin dashboard.
|
1436 |
* More intuitive UI for woocommerce login.
|
1437 |
* Tested front-end login with themes like wordpress default theme,
|
1438 |
customizr theme,zerif-lite theme,accesspress store theme,ishop theme and many more.
|
1439 |
|
1440 |
= 4.1.2 =
|
1441 |
+
* Google Authenticator - Two Factor Authentication ( 2FA ): Google Authenticator for Windows phone
|
1442 |
* Fixed CSS conflict with front-end of site if woocommerce is not enabled.
|
1443 |
|
1444 |
= 4.1.1 =
|
1445 |
+
* Google Authenticator - Two Factor Authentication ( 2FA ): Adding Validation in choosing Security Questions (KBA).
|
1446 |
|
1447 |
= 4.1.0 =
|
1448 |
+
* Google Authenticator - Two Factor Authentication ( 2FA ): Features added.
|
1449 |
multisite support
|
1450 |
Custom login redirection
|
1451 |
Authy 2-Factor Authentication as separate authentication method
|
1452 |
|
1453 |
+
= 4.0.6 = Google Authenticator - Two Factor Authentication Added multisite support and custom redirection after login feature.
|
1454 |
|
1455 |
+
= 4.0.5 = Google Authenticator - Two Factor Authentication Login into third party apps which support XML-RPC.
|
1456 |
|
1457 |
+
= 4.0.4 = Google Authenticator - Two Factor Authentication Added a check of KBA configuration from mobile login.
|
1458 |
|
1459 |
+
= 4.0.3 = Google Authenticator - Two Factor Authentication Added Support for Authy 2-Factor Authentication App.
|
1460 |
|
1461 |
+
= 4.0.2 = Google Authenticator - Two Factor Authentication Added a check for selection of unique questions during KBA setup .
|
1462 |
|
1463 |
+
= 4.0.1 = Bug Fix Google Authenticator - 2 Factor
|
1464 |
|
1465 |
= 4.0 =
|
1466 |
+
* Google Authenticator - Two Factor Authentication ( 2FA ): Features added.
|
1467 |
* KBA as backup method.
|
1468 |
* mobile browser support.
|
1469 |
* more intuitive UI for woocommerce login.
|
1470 |
|
1471 |
= 3.8 =
|
1472 |
+
* Google Authenticator - Two Factor Authentication ( 2 Factor ): Bug Fix for roles.
|
1473 |
|
1474 |
= 3.7 =
|
1475 |
+
* Google Authenticator - Two Factor Authentication ( 2FA ): Activation of two factor role wise.
|
1476 |
|
1477 |
= 3.6 =
|
1478 |
+
* Google Authenticator - Two Factor Authentication ( 2FA ): email verification in inline registration flow for all users.
|
1479 |
More descriptive setup messages and UI changes.
|
1480 |
|
1481 |
= 3.5 =
|
1482 |
+
* Google Authenticator - Two Factor Authentication ( 2FA ): Provided mobile login support.
|
1483 |
|
1484 |
= 3.4 =
|
1485 |
+
* Google Authenticator - Two Factor Authentication ( 2FA ): Features added
|
1486 |
* Inline registration flow for users.
|
1487 |
* Security Questions (KBA) as additional method
|
1488 |
* Alternate way of user identification in customer creation.
|
1489 |
* premium customizable features.
|
1490 |
|
1491 |
= 3.3 =
|
1492 |
+
* Google Authenticator - Two Factor Authentication ( 2FA ): Fix the issue of session for some versions of php.
|
1493 |
|
1494 |
= 3.2 =
|
1495 |
+
* Google Authenticator - Two Factor Authentication ( 2FA ): Fix for device-id compatibility.
|
1496 |
|
1497 |
= 3.1 =
|
1498 |
+
* Google Authenticator - Two Factor Authentication ( 2 Factor ): Fix for 2FA ShortCode.
|
1499 |
|
1500 |
= 3.0 =
|
1501 |
+
* Google Authenticator - Two Factor Authentication ( 2FA ): Features added
|
1502 |
* Google Authenticator.
|
1503 |
* Device Id (Remember device).
|
1504 |
* Choice given to admin to enable specific authentication methods for users.
|
1507 |
* More intuitive UI and descriptive instructions.
|
1508 |
|
1509 |
= 2.6 =
|
1510 |
+
* Google Authenticator - Two Factor Authentication ( 2FA ): Fix the compatibility issues of user session with other security plugins.
|
1511 |
|
1512 |
= 2.5 =
|
1513 |
+
* Google Authenticator - Two Factor Authentication ( 2FA ): Fix the compatibility issues with All In One WP Security & Firewall plugin.
|
1514 |
|
1515 |
= 2.4 =
|
1516 |
+
* Google Authenticator - Two Factor Authentication ( 2FA ): UI fixes for admin media library dashboard.
|
1517 |
|
1518 |
= 2.3 =
|
1519 |
+
* Google Authenticator - Two Factor Authentication ( 2FA ): More descriptive setup messages, more intuitive UI.
|
1520 |
|
1521 |
= 2.2 =
|
1522 |
+
* Google Authenticator - Two Factor Authentication ( 2FA ): Fixed css issues for existing users
|
1523 |
|
1524 |
= 2.1 =
|
1525 |
+
* Google Authenticator - Two Factor Authentication ( 2FA ): Added support for multiple Two Factor Choices like OTP Over SMS, Phone Call Verification, Push Notification, Soft Token (like Google Authenticator Code), Email Verification, etc.
|
1526 |
|
1527 |
= 2.0 =
|
1528 |
+
* Google Authenticator - Two Factor Authentication ( 2FA ): Added login with password plus second factor feature.
|
1529 |
|
1530 |
= 1.8 =
|
1531 |
+
* Google Authenticator - Two Factor Authentication ( 2FA ): Added feature of different login form choice,test authentication and help for configuration and setup.
|
1532 |
|
1533 |
= 1.7 =
|
1534 |
+
* Bug Fixes Google Authenticator - Two Factor Authentication ( 2FA ): Modifying login screen adaptable to user's login form
|
1535 |
|
1536 |
= 1.6 =
|
1537 |
+
* Bug Fixes Google Authenticator - Two Factor Authentication ( 2FA ): fetching 2 factor configuration when activating the plugin after deactivating it.
|
1538 |
|
1539 |
= 1.5 =
|
1540 |
+
* Bug Fixes Google Authenticator - Two Factor Authentication ( 2FA ): Login issues and password save issues resolved
|
1541 |
|
1542 |
= 1.4 =
|
1543 |
+
* Bug Fixes Google Authenticator - Two Factor Authentication ( 2FA ): Authentication was not working on some version of php.
|
1544 |
|
1545 |
= 1.3 =
|
1546 |
+
* Google Authenticator - Two Factor Authentication Bug Fixes
|
1547 |
|
1548 |
= 1.2 =
|
1549 |
+
* Google Authenticator - Two Factor Authentication ( 2FA ): Added 2 factor for all users along with forgot phone functionality.
|
1550 |
|
1551 |
= 1.1 =
|
1552 |
+
* Google Authenticator - Two Factor Authentication ( 2FA ): Added email ID verification during registration.
|
1553 |
|
1554 |
= 1.0.0 =
|
1555 |
First version of Two Factor Authentication ( 2FA ) plugin.
|
views/twofa/setup_twofa.php
CHANGED
@@ -206,47 +206,8 @@
|
|
206 |
|
207 |
</div>
|
208 |
<?php
|
209 |
-
|
210 |
-
// "Google Authenticator",
|
211 |
-
// "miniOrange Soft Token",
|
212 |
-
// "Authy Authenticator",
|
213 |
-
// "Security Questions",
|
214 |
-
// "miniOrange Push Notification",
|
215 |
-
// "miniOrange QR Code Authentication"
|
216 |
-
// ) ) ) {
|
217 |
-
?>
|
218 |
-
<?php if(current_user_can('administrator')){ ?>
|
219 |
-
<div style="float:right;">
|
220 |
-
<form name="f" method="post" action="" id="mo2f_enable_2FA_on_login_page_form">
|
221 |
-
<input type="hidden" name="option" value="mo2f_enable_2FA_on_login_page_option"/>
|
222 |
-
<input type="hidden" name="mo2f_enable_2FA_on_login_page_option_nonce"
|
223 |
-
value="
|
224 |
-
<?php
|
225 |
-
echo wp_create_nonce( "mo2f-enable-2FA-on-login-page-option-nonce" )
|
226 |
-
?>
|
227 |
-
"/>
|
228 |
-
|
229 |
-
<input type="checkbox" id="mo2f_enable_2fa_prompt_on_login_page"
|
230 |
-
name="mo2f_enable_2fa_prompt_on_login_page"
|
231 |
-
value="1"
|
232 |
-
<?php
|
233 |
-
checked( MoWpnsUtility::get_mo2f_db_option('mo2f_enable_2fa_prompt_on_login_page', 'get_option') == 1 );
|
234 |
-
|
235 |
-
if (!current_user_can('administrator') && ! in_array( $Mo2fdbQueries->get_user_detail( 'mo_2factor_user_registration_status', $user->ID ), array(
|
236 |
-
'MO_2_FACTOR_PLUGIN_SETTINGS',
|
237 |
-
'MO_2_FACTOR_INITIALIZE_TWO_FACTOR'
|
238 |
-
) ) ) {
|
239 |
-
echo 'disabled';
|
240 |
-
}
|
241 |
-
?>
|
242 |
-
onChange="document.getElementById('mo2f_enable_2fa_prompt_on_login_page').form.submit()"/>
|
243 |
-
<?php
|
244 |
-
echo mo2f_lt( 'Enable 2FA prompt on the WP Login Page' );
|
245 |
-
?>
|
246 |
-
</form>
|
247 |
-
</div>
|
248 |
|
249 |
-
<?php
|
250 |
$EmailTransactions = MoWpnsUtility::get_mo2f_db_option('cmVtYWluaW5nT1RQ', 'site_option');
|
251 |
$EmailTransactions = $EmailTransactions? $EmailTransactions : 0;
|
252 |
$SMSTransactions = get_site_option('cmVtYWluaW5nT1RQVHJhbnNhY3Rpb25z')?get_site_option('cmVtYWluaW5nT1RQVHJhbnNhY3Rpb25z'):0;
|
206 |
|
207 |
</div>
|
208 |
<?php
|
209 |
+
if(current_user_can('administrator')){
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
210 |
|
|
|
211 |
$EmailTransactions = MoWpnsUtility::get_mo2f_db_option('cmVtYWluaW5nT1RQ', 'site_option');
|
212 |
$EmailTransactions = $EmailTransactions? $EmailTransactions : 0;
|
213 |
$SMSTransactions = get_site_option('cmVtYWluaW5nT1RQVHJhbnNhY3Rpb25z')?get_site_option('cmVtYWluaW5nT1RQVHJhbnNhY3Rpb25z'):0;
|