Plugin didn’t show secure code

Hi,

Please can you give some more info on the particular steps you’ve taken? Presumably, if you didn’t succeed in scanning the QR code (what happened when you tried? N.B. You can also type in the key if the scan does not work on your phone), then you didn’t activate TFA on your account, and hence that’s why the field doesn’t show? (Does the first sentence refer to the TFA field on the login form showing? I’m not sure what you mean by the code not showing – can you explain?).

David

have an error

What is the error?

Thank you for your quick reply!
When i try to scan QR code google app says that it can’t find a key in this code
I scaned this code by qr droid, and it shows me this –
otpauth://totp/besdima.ru:Besdima?secret=&issuer=besdima.ru&counter=

> I’m not sure what you mean by the code not showing
I mean that is no key in it, so i can’t istall FTA manual in phone

ps sorry about bad english

for info my system:
Wind 2016
IIS 10
PHP Version 5.6.30

Hi,

In the WP dashboard, what does it show underneath the QR code? Does it show a key there?

David

No, there is no key there

What is there – can you link a screenshot? (e.g. https://snag.gy ).

Is there a “reset private key” link? Does it give you a key if you press it?

https://snag.gy/NYeA4y.jpg
Yep, press reset key no effects

Strange – I have not seen that before!

So, it seems that something in the key generation code fails. Is anything logged in your PHP error log?

Yes, i find this in PHP log:
[16-Feb-2017 09:43:53 UTC] PHP Warning: mcrypt_decrypt(): Received initialization vector of size 20, but size 16 is required for this encryption mode in C:\inetpub\Besdima.ru\wp-content\plugins\two-factor-authentication\includes\class.TFA.php on line 511
[16-Feb-2017 09:43:53 UTC] PHP Warning: mcrypt_decrypt(): Received initialization vector of size 20, but size 16 is required for this encryption mode in C:\inetpub\Besdima.ru\wp-content\plugins\two-factor-authentication\includes\class.TFA.php on line 511
[16-Feb-2017 09:43:53 UTC] PHP Warning: mcrypt_decrypt(): Received initialization vector of size 20, but size 16 is required for this encryption mode in C:\inetpub\Besdima.ru\wp-content\plugins\two-factor-authentication\includes\class.TFA.php on line 511
[16-Feb-2017 09:44:25 UTC] PHP Warning: mcrypt_decrypt(): Received initialization vector of size 22, but size 16 is required for this encryption mode in C:\inetpub\Besdima.ru\wp-content\plugins\two-factor-authentication\includes\class.TFA.php on line 511
[16-Feb-2017 09:44:25 UTC] PHP Warning: mcrypt_decrypt(): Received initialization vector of size 22, but size 16 is required for this encryption mode in C:\inetpub\Besdima.ru\wp-content\plugins\two-factor-authentication\includes\class.TFA.php on line 511
[16-Feb-2017 09:44:25 UTC] PHP Warning: mcrypt_decrypt(): Received initialization vector of size 22, but size 16 is required for this encryption mode in C:\inetpub\Besdima.ru\wp-content\plugins\two-factor-authentication\includes\class.TFA.php on line 511

Yes, i find this in PHP log:
PHP Warning: mcrypt_decrypt(): Received initialization vector of size 20, but size 16 is required for this encryption mode in Besdima.ru\wp-content\plugins\two-factor-authentication\includes\class.TFA.php on line 511

Very strange; the code asks mcrypt for what size it wants, and then gives it that many bytes. So it is odd that on this particular server, it then complains it was the wrong size.
What PHP version is the site running on?

I have non threat PHP 5.6.30

Hi,

Hmmm, this is really odd. That’s a very common version, of course.

I think the only way it could be investigated is if I could have a WP login on your site. If you are willing for that, please confirm, and I will give you an email address to send details to.

Does the problem exist even with no other plugins activated? If it does, you could set up a test site on the same server with no other plugins, if you prefer.

David

Mm, i will try to install clean test WP site without any plugins, if on test site i have the same error i can give you a admin right’s
My email [email protected]