Gecko [ arkitchencabinet.com ]

Name	Size	Permission	Date
images	[ DIR ]	drwxr-xr-x	2026-02-03 23:25
php53	[ DIR ]	drwxr-xr-x	2026-02-03 23:25
php56	[ DIR ]	drwxr-xr-x	2026-02-03 23:25
php71	[ DIR ]	drwxr-xr-x	2026-02-03 23:25
php81	[ DIR ]	drwxr-xr-x	2026-02-03 23:25
php82	[ DIR ]	drwxr-xr-x	2026-02-03 23:25
_clone.php	2.94 KB	-rw-r--r--	2025-07-30 09:56
_edit.php	3.47 KB	-rw-r--r--	2025-04-14 12:43
_edit.xml	447 B	-rw-r--r--	2025-04-14 12:43
extend.php	8.29 KB	-rw-r--r--	2026-02-02 12:50
fileindex.php	95 B	-rw-r--r--	2024-07-10 12:02
gen_totp_key.php	1.21 KB	-rw-r--r--	2025-07-30 09:56
import.php	3.02 KB	-rw-r--r--	2026-02-02 12:50
info.xml	2.4 KB	-rw-r--r--	2026-02-02 12:20
init.php	2.93 KB	-rw-r--r--	2026-02-02 12:20
install.js	921 B	-rw-r--r--	2021-12-23 11:54
install.php	5.82 KB	-rw-r--r--	2026-02-02 12:50
install.xml	2.04 KB	-rw-r--r--	2026-02-02 12:20
md5	3.58 KB	-rw-r--r--	2026-02-02 12:50
notes.txt	1.13 KB	-rw-r--r--	2025-07-30 09:56
totp_key.php	1.47 KB	-rw-r--r--	2025-07-30 09:56
totp_requirements.php	2.33 KB	-rw-r--r--	2025-08-25 11:12
update_pass.php	517 B	-rw-r--r--	2025-04-14 12:43
user_manager_columns.php	6 KB	-rw-r--r--	2026-02-02 12:20
userspice.sql	51.96 KB	-rw-r--r--	2026-02-02 12:20
userspice.zip	5.81 MB	-rw-r--r--	2026-02-02 12:20

Rename

<?php
/*
UserSpice 5 - Default TOTP Requirements Configuration
DO NOT EDIT THIS FILE DIRECTLY

To customize TOTP requirements, copy this file to:
usersc/includes/totp_requirements.php

This allows you to maintain your customizations through UserSpice updates.
*/

// Default TOTP Requirements
$totp_requirements = [
    'login_methods' => [
        'cookie' => false,
        'password' => true,      
        'email' => true,       
        'passkeys' => false,    
        'google' => false,      
        'facebook' => false,     
        'oauth' => false,        // Generic OAuth (for plugins)
        'okta' => false,        
        'saml' => false,        
        'ldap' => false, 
        'discord' => false,
        'twitch' => false,      
    ],
    
    // Pages that should never trigger TOTP redirects
    'safe_pages' => [
        'totp_management.php',
        'totp_verification.php', 
        'logout.php',
        'maintenance.php',
        'banned.php',
        'complete.php',
        'verify.php',
        'verify_thankyou.php',
        'verify_resend.php',
        'verify_resend_thankyou.php',
        'update.php',
        'oauth_success.php',
        'callback.php',
    ],

];

/*
CUSTOMIZATION EXAMPLES for usersc/includes/totp_requirements.php:

// Force admins to always use TOTP regardless of login method
if (hasPerm(2, $user_id)) {
    foreach ($totp_requirements['login_methods'] as $method => $required) {
        $totp_requirements['login_methods'][$method] = true;
    }
}

// Remove TOTP for specific accounts
$sample_accounts = [1, 5, 10, 15];
if (in_array($user_id, $sample_accounts)) {
    foreach ($totp_requirements['login_methods'] as $method => $required) {
        $totp_requirements['login_methods'][$method] = false;
    }

}

// Require TOTP based on IP ranges
$client_ip = $_SERVER['REMOTE_ADDR'] ?? '';
if (!in_array($client_ip, ['192.168.1.0/24', '10.0.0.0/8')) {
    // External IPs require TOTP for all login methods
    foreach ($totp_requirements['login_methods'] as $method => $required) {
        $totp_requirements['login_methods'][$method] = true;
    }
}

// Prevent TOTP on localhost
if (strpos($client_ip, '127.0.0.') === 0 || strpos($client_ip, '::1') === 0) {
    foreach ($totp_requirements['login_methods'] as $method => $required) {
        $totp_requirements['login_methods'][$method] = false;
    }
}
*/