Implement Two-Factor Authentication Via Email - Build Expense Tracker App With PHP 8

[@Zubbee]

Oh great. Another one in succession. Thanks Gio. Must be a lot of hard work.

[@ProgramWithGio]

Thank you. Yes it is indeed a lot of work which is why it takes me awhile to publish new videos.

[@basilistigris640]

this series is real to is name Learn PHP The Right Way - Full PHP Tutorial For Beginners & Advanced and the teacher is expaining complex functionalities in a way that make easy to learn, keep make videos for php and if you can please make raw php with vanilla js ajax, real world project videos, thank you!!

[@ProgramWithGio]

Thank you 💙💙

[@fictitioustech]

The best series ever. Thanks for this. Can you please also make tutorials for Asynchronous and also if there is some best library in your opinion?

[@ProgramWithGio]

Thank you 🙏. I haven't done a lot of async PHP, but is something I'm interested in. ReactPHP/framework X are good I think

[@fictitioustech]

@@ProgramWithGio Thanks for the suggestion. I'll definitely look into this. And again thanks for providing us with the top notch content. I already recommend this to all my fellow devs and highly recommend to those who want to learn PHP but in the right way.

[@ProgramWithGio]

Thank you 💙

[@balajik7354]

If manipulate the user request in proxy tool and how how to show the alert

[@ProgramWithGio]

I dont really understand the question. If user manipulates the URL they will get an error. What type of error is up to you, depends how you do error handling

[@Netvirux]

"Hi Gio, I trust you're doing well. I've been working on developing a PHP script and I want to ask you something. I'm interested in implementing a server-side activation mechanism to ensure that users need to interact with my website or server before the script can be fully activated and used. Additionally, I want to make it challenging for users to modify or bypass the activation mechanism and ensure that I have remote control over the activation process. Could you please provide guidance on how I can build such a mechanism? Specifically, I'm looking for advice on: 1. Implementing the activation logic within the PHP script. 2. Enhancing security measures to prevent unauthorized modifications or bypassing of the activation mechanism. 3. Establishing remote control over the activation process to enable/disable script functionality as needed. Thank you in advance for your help!

[@ProgramWithGio]

It depends on your app structure. You could implement that with some flags on users table which would be much simpler but again it depends on the app

[@paulfontaine7819]

From a usability point of view, it would be easier to use a link in the mail to avoid copy paste and why invalidate old codes? In case mailis slow, a user may be some mails behind and get confused why the code is invalid.

[@ProgramWithGio]

Not really, for 2FA most of them are codes. For user verification it's a link. Also invalidating old codes is part of security, expiration is also set for that, expiration is 30 mins and email shouldn't be delayed that long, if it is then there is a problem

[@paulfontaine7819]

Most of them are codes indead. Is that for a security reason or because there is no other way. I think the second. In this case a link is possible and that would be much easier for the users. Do you see a security reason?

[@ProgramWithGio]

Yea more suspectible to phishing attacks, coded email also can be phished but having signed URL might be more suspectible & easier to have users tricked to click into it if they are used to signing in using link rather than entering the codes

[@paulfontaine7819]

@@ProgramWithGio Thanks Gio that makes sense.

[@khantsithuphyo5484]

I want to create it will extend Laravel that will be pre define my function like helper,add some route, controller, migration,model,view,some essential package like data table,etc ... but I don't know too much in composer script .I mean my package is Laravel/Laravel not Laravel/framework.If any way you have please share me ,I really want it

[@ProgramWithGio]

I'm not sure I understand what you are trying to do. laravel/laravel is the userland repo, thats what you use to build laravel apps, laravel/framework is the actual framework code.

[@khantsithuphyo5484]

@@ProgramWithGio yes I know that and I want to copy Laravel/Laravel with my additional code like before I mentioned then it will be my package.

[@ProgramWithGio]

@@khantsithuphyo5484 so you want to create a package. Search in Google for package development in Laravel and you'll find some tutorials

[@forzainter7098]

the best 👌

[@ProgramWithGio]

Thank you

[@rxxt-sh1vj]

Bro i would also request you to create a video on middleware implementation with routing as its not explained anywhere properly..:D

[@ProgramWithGio]

Noted, thank you