Complete security audit fixes

app/login/api/engine/login_otp.php

@@ -1,6 +1,7 @@
 <?php 
 	session_start();
 
+	require '../../../config.php';
 	require '../../../preset.php';
 	require '../../../assets/utils/db_auth.php';
 
@@ -10,27 +11,15 @@
 	$user_id		= $sth->fetchColumn();
 
 	$username 		= strtolower($data["username"]);
-	$password 		= md5(trim(strtolower($data["password"])));	
-	$salt_password 	= md5($user_id."_".trim(strtolower($data["password"])));	
 	// get password 
 	$sth = $pdo1->prepare("select password from user where username = ? or email = ? limit 1;");
 	$sth->execute(array($username,$username));
 	$temp = $sth->fetch(PDO::FETCH_ASSOC);
 
-  if( strtolower($data["username"]) == "support" ){
-		if( $data["password"] == strtolower(substr(md5("trcloud".date("Ymd")),0,4)) ){
-			$support = true;
-		}else{
-			$support = false;
-		}
-	}else{
-		$support = false;
-	}
-
   /**
 	 * validate password
 	*/
-	if((($password == $temp["password"]||$salt_password == $temp["password"]) && strtolower($data["username"]) != "support") || $support == true ){
+	if(password_verify(trim($data["password"]), $temp["password"])) {
 
 		// create user session
 		if( strtolower($data["username"]) == "support" ){
@@ -150,7 +139,7 @@
 			return str_pad($result, 6, 'A', STR_PAD_LEFT);
 		}
 
-		$otp = generateOTP($password);
+		$otp = generateOTP($temp["password"]);
 
 		$reference_number = numberToLetters(generateOTP($otp));