Big issue – ERROR: Invalid verification code + critical

  • Resolved szrejder

    (@szrejder)


    2 years, 6 months ago

    Hello,

    There are issues, probably after updating. On multiple sites I manage, there is a problem with login – almost every 2FA account gets “ERROR: Invalid verification code.” even if it’s correct. It’s really big issue as I cant’ login to admin account without fixing it manually.

    There is a critical error too:

    WordPress w wersji 6.0.2
Aktualny motyw: Barberry Child (wersja 2.9.9)
Aktualna wtyczka: WP 2FA - Two-factor authentication for WordPress (wersja 2.3.0)
Wersja PHP: 8.1.2

Szczegó?y b??du
===================
B??d typu E_ERROR zosta? spowodowany w linii 291 pliku /var/www/html/wp-content/plugins/wp-2fa/includes/classes/Authenticator/class-authentication.php. Komunikat b??du: Uncaught Exception: Invalid characters in the base32 string. in /var/www/html/wp-content/plugins/wp-2fa/includes/classes/Authenticator/class-authentication.php:291
Stack trace:
#0 /var/www/html/wp-content/plugins/wp-2fa/includes/classes/Authenticator/class-authentication.php(255): WP2FA\Authenticator\Authentication::base32_decode()
#1 /var/www/html/wp-content/plugins/wp-2fa/includes/classes/Authenticator/class-authentication.php(234): WP2FA\Authenticator\Authentication::calc_totp()
#2 /var/www/html/wp-content/plugins/wp-2fa/includes/classes/Authenticator/class-login.php(903): WP2FA\Authenticator\Authentication::is_valid_authcode()
#3 /var/www/html/wp-content/plugins/wp-2fa/includes/classes/Authenticator/class-login.php(719): WP2FA\Authenticator\Login::validate_totp_authentication()
#4 /var/www/html/wp-includes/class-wp-hook.php(307): WP2FA\Authenticator\Login::login_form_validate_2fa()
#5 /var/www/html/wp-includes/class-wp-hook.php(331): WP_Hook->apply_filters()
#6 /var/www/html/wp-includes/plugin.php(476): WP_Hook->do_action()
#7 /var/www/html/wp-settings.php(620): do_action()
#8 /var/www/html/wp-config.php(268): require_once('...')
#9 /var/www/html/wp-load.php(50): require_once('...')
#10 /var/www/html/wp-login.php(12): require('...')
#11 {main}
Viewing 5 replies - 1 through 5 (of 5 total)
  • Plugin Contributor robertabela

    (@robert681)

    Hello @szrejder

    Thank you for using our plugin.

    I am sorry to read about your issue. To confirm;

    1) Are all accounts with 2FA enabled experiencing this problem? Or are there accounts, which maybe have different 2FA method that they can still be used?

    2) Is the error reported when there is the error that the code is invalid, or is this showing up on separate occasions?

    The more information and details you can share with us the quicker we can identify the issue.

    Thank you for your cooperation and we look forward to hearing from you.

    Thread Starter szrejder

    (@szrejder)

    1) Probably all of them, but I couldn’t test every account. Mainly authenticator ones, but one e-mail authentication as well.

    2) On one website it started appearing after trying to use one invalid code (it made it impossible to login with a valid one), but on the other site I don’t think that someone used invalid code.

    Issue persists even after I restarted my server.

    Plugin Contributor robertabela

    (@robert681)

    To look into this we need more information about your setup @szrejder

    Can you please send us the system information for from the “Help & Contact us” section in the plugin?

    Please send it over email at [email protected] and make reference to this ticket in the email. Do not share the file information in this thread, since it contains technical information about your WordPress setup.

    Thank you for your cooperation. We look forward to hearing from you.

    I’m also seeing a similar issue.

    <b>Fatal error</b>:  Uncaught Exception: Invalid characters in the base32 string. in ./com.instacart/wp-content/plugins/wp-2fa/includes/classes/Authenticator/class-authentication.php:291
Stack trace:
#0 ./wp-content/plugins/wp-2fa/includes/classes/Authenticator/class-authentication.php(255): WP2FA\Authenticator\Authentication::base32_decode('\x85\xC8\x14\xA5Y\xD1O\xC19M/5\xE0\xBE\xC1...')
#1 ./wp-content/plugins/wp-2fa/includes/classes/Authenticator/class-authentication.php(234): WP2FA\Authenticator\Authentication::calc_totp('\x85\xC8\x14\xA5y\xD1o\xC19M/5\xE0\xBE\xC1...', 55459830.366667)
#2 ./wp-content/plugins/wp-2fa/includes/classes/Authenticator/class-login.php(903): WP2FA\Authenticator\Authentication::is_valid_authcode('\x85\xC8\x14\xA5y\xD1o\xC19M/5\xE0\xBE\xC1...', '514482')
#3 ./wp-content/plugins/wp-2fa/includes/classes/Authenticator/class-login.php(719): WP2FA\Authenticator\Login::vali in <b>./wp-content/plugins/wp-2fa/includes/classes/Authenticator/class-authentication.php</b> on line <b>291</b><br />
    Plugin Contributor robertabela

    (@robert681)

    Hello @pauljmartinez

    Thank you for your message and for using our plugin.

    As per the forums’ guidelines, can you please open your own forum thread? Thank you for your understanding and cooperation.

    We look forward to hearing from you.

Viewing 5 replies - 1 through 5 (of 5 total)
  • The topic ‘Big issue – ERROR: Invalid verification code + critical’ is closed to new replies.

Tags