Michael Kliewe

Hi Majid, it totally makes sense what you say, would you be interested in creating a patch for your suggestion? I think it would enhance the robustness against graphic-analyizing bots....

Most often it's a time problem, so the clock is not synchronized between the mobile phone and the server. Please check if both systems have the same time, then they...

Hello, can you please explain where the bug exactly is? Why does getCode() not return the correct value? It works since years. Maybe you changed my class and activated strict_types...

As always: Check the time on the server and on your device. They have to be in sync. `$discrepancy=1` means: 1 code before the current one, and the next code...

As you can see, I didn't change the code. Check your error.log file for any errors (Fatal errors or something?). Maybe you updated PHP? As you can see in the...

time() returns the unix timestamp, which is always GMT. Summer time does not affect that. If it would be something with "wrong timezone": Then `verifyCode` would always return `false`. You...

I guess TOTP is used much more often than HOTP... A Pull Request with a HOTP implementation would be awesome! The built-in _base32Decode() function works fine, I'm not sure why...

I guess the problem is that you give the current timestamp to the methods getCode() and verifyCode(). You need to give it the "time slice", which is a timestamp devided...

You can of cause use your own QRCode generation library. The Google QRCode generator is just an easy and quick example. Google does not know which account it's connected to,...

Please support webauthn. Currently only Chrome is supported by your plugin, which pushes the Chrome monopoly even further. By supporting webauthn, you don't force people to use Chrome.