Make email OTP login off by default

2026-09-14 15:38:36 +07:00
parent 21148bf50c
commit 6b3a590aa9
9 changed files with 33 additions and 32 deletions
@@ -199,12 +199,12 @@ $_usage_full   = $_usage_max_pct >= 100;
      </li>
      <?php endif; ?>

-      <!-- Email OTP off: a weakened sign-in must never be invisible to whoever is using it -->
+      <!-- Email OTP off (the default): a password-only sign-in must never be invisible to whoever is using it -->
      <?php if (!otp_required()): ?>
      <li class="d-none d-md-block">
        <span class="badge bg-warning text-dark d-flex align-items-center gap-1 px-2 py-1"
              style="font-size:11px; cursor:default;"
-              title="OTP_REQUIRED=false in config.php">
+              title="OTP_REQUIRED is not true in config.php">
          <i class="ti ti-shield-off"></i>
          OTP off
        </span>