{include file="header.tpl"}

<div class="main-content">
  <div class="page-content">
    <div class="row">
      <div class="col-xl-12">
        <div class="card">
          <div class="card-body">
            <h4 class="card-title">Advanced login security settings</h4>

            <form method="post">
              <input type="hidden" name="a" value="security">
              <input type="hidden" name="action" value="save">

              Detect IP Address Change Sensitivity<br>
              <input type="radio" name="ip" value="disabled" {if $security.detect_ip == 'disabled'}checked{/if}> Disabled<br>
              <input type="radio" name="ip" value="medium" {if $security.detect_ip == 'medium'}checked{/if}> Medium<br>
              <input type="radio" name="ip" value="high" {if $security.detect_ip == 'high'}checked{/if}> High<br>
              <input type="radio" name="ip" value="always" {if $security.detect_ip == 'always'}checked{/if}> Paranoic<br><br>

              Detect Browser Change<br>
              <input type="radio" name="browser" value="disabled" {if $security.detect_browser == 'disabled'}checked{/if}> Disabled<br>
              <input type="radio" name="browser" value="enabled" {if $security.detect_browser == 'enabled'}checked{/if}> Enabled<br><br>

              <input type="submit" value="Set" class="btn btn-sm btn-primary">
            </form>

            {if $settings.use_tfa}
            <h4 class="card-title mt-4">Two Factor Authentication</h4>
            <form method="post" name="mainform">
              <input type="hidden" name="a" value="security">
              <input type="hidden" name="action" value="tfa_save">
              <input type="hidden" name="time">

              {if $errors.invalid_tfa_code}
              <b style="color:red">Invalid code.</b><br>
              {/if}
              {if $errors.invalid_tfa_secret}
              <b style="color:red">Invalid Secret.</b><br>
              {/if}

              {if $tfa_enabled}
              <input type="checkbox" name="tfa_on_login" value="1" {if $tfa_settings.login}checked{/if}> on Login<br>
              <input type="checkbox" name="tfa_on_edit_account" value="1" {if $tfa_settings.edit_account}checked{/if}> on Edit Account<br>
              <input type="checkbox" name="tfa_on_withdraw" value="1" {if $tfa_settings.withdraw}checked{/if}> on Withdraw<br>
              <input type="checkbox" name="tfa_disable" value="1"> <b style="color:red">Disable Two Factor Authentication (not recommended)</b><br><br>

              Confirm by typing code:
              <input type="text" name="code" class="form-control form-control-sm">
              <input type="submit" value="Update" class="btn btn-sm btn-primary">
              {else}
              1. Install <a href="http://m.google.com/authenticator" target="_blank">Google Authenticator</a> on your mobile device.<br>
              2. Your Secret Code is: <b>{$tfa_secret}</b>
              <input type="hidden" name="tfa_secret" value="{$tfa_secret}"><br>
              <img src="{$tfa_secret_url}"><br>
              3. Please enter two factor token from Google Authenticator to verify correct setup:<br>
              <input type="text" name="code" class="form-control form-control-sm">
              <input type="submit" value="Enable" class="btn btn-sm btn-primary">
              {/if}
            </form>
            {/if}

          </div>
        </div>
      </div>
    </div>
  </div>
</div>

{literal}
<script language="javascript">
  document.mainform.time.value = (new Date()).getTime();

  function checkform() {
    if (!document.mainform.code.value.match(/^[0-9]{6}$/)) {
      alert("Please type code!");
      document.mainform.code.focus();
      return false;
    }
    return true;
  }
</script>
{/literal}

{include file="footer.tpl"}
