- Administrator email 2FA is now explicitly disabled.

Database value: two_factor_enabled = 0
Removed outstanding administrator verification codes
Seeded administrator explicitly defaults to 0
Confirmed fresh login routes directly to /admin, not /verify

app/Controllers/AuthController.php

@@ -135,8 +135,9 @@ final class AuthController extends BaseController
 
         $this->db->execute(
             'INSERT INTO users
-                (email, password_hash, full_name, phone, street_address, city, state, postal_code, newsletter_opt_in)
-             VALUES (?, ?, ?, ?, ?, ?, ?, ?, 1)',
+                (email, password_hash, full_name, phone, street_address, city, state, postal_code,
+                 newsletter_opt_in, two_factor_enabled)
+             VALUES (?, ?, ?, ?, ?, ?, ?, ?, 1, 0)',
             [
                 $clean['email'],
                 password_hash((string) $input['password'], PASSWORD_DEFAULT),

app/Core/Database.php

@@ -374,8 +374,9 @@ SQL;
 
             $adminStatement = $this->pdo->prepare(
                 'INSERT INTO users
-                    (email, password_hash, full_name, phone, role, newsletter_opt_in, email_verified_at)
-                 VALUES (?, ?, ?, ?, ?, ?, CURRENT_TIMESTAMP)'
+                    (email, password_hash, full_name, phone, role, newsletter_opt_in,
+                     two_factor_enabled, email_verified_at)
+                 VALUES (?, ?, ?, ?, ?, ?, 0, CURRENT_TIMESTAMP)'
             );
             $adminStatement->execute([
                 'admin@fatbottomgrille.com',