<?
  $configPath = substr(__DIR__,0,strpos(__DIR__,"/public_html"))."/config.php";
  include_once($configPath);
  $error = true;
  if (!empty($_SESSION["utente"]) && empty($_SESSION["utente"]->getInfo()["twoFactor_token"]) && !empty($_SESSION["secret"]) && !empty($_POST["code"]) && tokenVerify()) {
    $tfa = new RobThree\Auth\TwoFactorAuth('TUTTOGARE-PA-30');
    if ($tfa->verifyCode($_SESSION['secret'], $_POST['code'])) {
      $array = [];
      $array["codice"] = $_SESSION["utente"]->codice;
      $array["twoFactor_token"] = simple_encrypt($_SESSION['secret'],$config["2FA-salt"]);
      $salva = new salva();
      $salva->debug = false;
      
      $salva->nome_tabella = "b_utenti";
      $salva->operazione = "UPDATE";
      $salva->oggetto = $array;
      $codice = $salva->save();
      if ($codice != false) {
        $error = false;
        ?>
        swal({title:js_dict["success-msg"],type:"success"}).then(function(){ window.location.reload(); });
        <?
      }
    }
  }
  if ($error) {
    header('HTTP/1.0 403 Forbidden');
    die();
  }
?>