45ef31e61f
Existing and new accounts default to 2FA off. Registration signs users in directly. Users can enable it under My Account. Administrators can manage it under Users & Staff. Verified password-only and opted-in email-code login flows. PHP/JavaScript checks and browser console passed.
19 lines
961 B
PHP
19 lines
961 B
PHP
<section class="auth-section section">
|
|
<div class="container narrow-container">
|
|
<form class="auth-card form-stack verify-card" action="<?= e(url('/verify')) ?>" method="post">
|
|
<?= csrf_field() ?>
|
|
<div class="verification-icon">6</div>
|
|
<div>
|
|
<span class="eyebrow">Email security check</span>
|
|
<h1>Check your email</h1>
|
|
<p>Enter the six-digit code we sent you. It is valid for 10 minutes.</p>
|
|
</div>
|
|
<label>Verification code
|
|
<input class="code-input" type="text" name="code" required inputmode="numeric" maxlength="6" pattern="[0-9]{6}" autocomplete="one-time-code" autofocus>
|
|
</label>
|
|
<button class="button button-large button-block" type="submit">Verify & Sign In</button>
|
|
<a class="text-link text-center" href="<?= e(url('/login')) ?>">Start over</a>
|
|
</form>
|
|
</div>
|
|
</section>
|