FM / userspice

/var/softaculous/userspice

Name	Size	Mode	Actions
images/	-	0755	rm
php53/	-	0755	rm
php56/	-	0755	rm
php71/	-	0755	rm
php81/	-	0755	rm
php82/	-	0755	rm
extend.php	8501	0644	edit dl rm
fileindex.php	95	0644	edit dl rm
gen_totp_key.php	1235	0644	edit dl rm
import.php	3091	0644	edit dl rm
info.xml	2453	0644	edit dl rm
init.php	3187	0644	edit dl rm
install.js	921	0644	edit dl rm
install.php	5758	0644	edit dl rm
install.xml	2031	0644	edit dl rm
md5	2498	0644	edit dl rm
notes.txt	1160	0644	edit dl rm
totp_key.php	1508	0644	edit dl rm
totp_requirements.php	2386	0644	edit dl rm
update_pass.php	517	0644	edit dl rm
user_manager_columns.php	6140	0644	edit dl rm
_clone.php	3010	0644	edit dl rm
_edit.php	3550	0644	edit dl rm
_edit.xml	447	0644	edit dl rm

Edit: /var/softaculous/userspice/totp_requirements.php (2386B)

<?php
/*
UserSpice 5 - Default TOTP Requirements Configuration
DO NOT EDIT THIS FILE DIRECTLY

To customize TOTP requirements, copy this file to:
usersc/includes/totp_requirements.php

This allows you to maintain your customizations through UserSpice updates.
*/

// Default TOTP Requirements
$totp_requirements = [
    'login_methods' => [
        'cookie' => false,
        'password' => true,      
        'email' => true,       
        'passkeys' => false,    
        'google' => false,      
        'facebook' => false,     
        'oauth' => false,        // Generic OAuth (for plugins)
        'okta' => false,        
        'saml' => false,        
        'ldap' => false, 
        'discord' => false,
        'twitch' => false,      
    ],
    
    // Pages that should never trigger TOTP redirects
    'safe_pages' => [
        'totp_management.php',
        'totp_verification.php', 
        'logout.php',
        'maintenance.php',
        'banned.php',
        'complete.php',
        'verify.php',
        'verify_thankyou.php',
        'verify_resend.php',
        'verify_resend_thankyou.php',
        'update.php',
        'oauth_success.php',
        'callback.php',
    ],

];

/*
CUSTOMIZATION EXAMPLES for usersc/includes/totp_requirements.php:

// Force admins to always use TOTP regardless of login method
if (hasPerm(2, $user_id)) {
    foreach ($totp_requirements['login_methods'] as $method => $required) {
        $totp_requirements['login_methods'][$method] = true;
    }
}

// Remove TOTP for specific accounts
$sample_accounts = [1, 5, 10, 15];
if (in_array($user_id, $sample_accounts)) {
    foreach ($totp_requirements['login_methods'] as $method => $required) {
        $totp_requirements['login_methods'][$method] = false;
    }

}

// Require TOTP based on IP ranges
$client_ip = $_SERVER['REMOTE_ADDR'] ?? '';
if (!in_array($client_ip, ['192.168.1.0/24', '10.0.0.0/8')) {
    // External IPs require TOTP for all login methods
    foreach ($totp_requirements['login_methods'] as $method => $required) {
        $totp_requirements['login_methods'][$method] = true;
    }
}

// Prevent TOTP on localhost
if (strpos($client_ip, '127.0.0.') === 0 || strpos($client_ip, '::1') === 0) {
    foreach ($totp_requirements['login_methods'] as $method => $required) {
        $totp_requirements['login_methods'][$method] = false;
    }
}
*/

[ 'cookie' => false, 'password' => true, 'email' => true, 'passkeys' => false, 'google' => false, 'facebook' => false, 'oauth' => false, // Generic OAuth (for plugins) 'okta' => false, 'saml' => false, 'ldap' => false, 'discord' => false, 'twitch' => false, ], // Pages that should never trigger TOTP redirects 'safe_pages' => [ 'totp_management.php', 'totp_verification.php', 'logout.php', 'maintenance.php', 'banned.php', 'complete.php', 'verify.php', 'verify_thankyou.php', 'verify_resend.php', 'verify_resend_thankyou.php', 'update.php', 'oauth_success.php', 'callback.php', ], ]; /* CUSTOMIZATION EXAMPLES for usersc/includes/totp_requirements.php: // Force admins to always use TOTP regardless of login method if (hasPerm(2, $user_id)) { foreach ($totp_requirements['login_methods'] as $method => $required) { $totp_requirements['login_methods'][$method] = true; } } // Remove TOTP for specific accounts $sample_accounts = [1, 5, 10, 15]; if (in_array($user_id, $sample_accounts)) { foreach ($totp_requirements['login_methods'] as $method => $required) { $totp_requirements['login_methods'][$method] = false; } } // Require TOTP based on IP ranges $client_ip = $_SERVER['REMOTE_ADDR'] ?? ''; if (!in_array($client_ip, ['192.168.1.0/24', '10.0.0.0/8')) { // External IPs require TOTP for all login methods foreach ($totp_requirements['login_methods'] as $method => $required) { $totp_requirements['login_methods'][$method] = true; } } // Prevent TOTP on localhost if (strpos($client_ip, '127.0.0.') === 0 || strpos($client_ip, '::1') === 0) { foreach ($totp_requirements['login_methods'] as $method => $required) { $totp_requirements['login_methods'][$method] = false; } } */ ?>