Security Recovery Addon

[XFFA.IR Bot]

I'm working on an addon that will allow a user to login using a secret phrase. They save the phrase from their user details page like this:
PHP:

    protected function accountDetailsSaveProcess(\XF\Entity\User $visitor)
    {
        $form = parent::accountDetailsSaveProcess($visitor);
    
        $secretPhrase = $this->filter('secret_phrase', 'str');
        \XF::logError('Secret phrase: ' . $secretPhrase);
    
        if ($secretPhrase !== '')
        {
            // Generate a unique...

Read more