• As a follow on to this post, which uses a wp-config define to turn off 2fa, there is another way….

    In your database….
    select * fromwp_optionswhere option_name='itsec-storage';

    This gives a 15k string in options_value

    The relevant string is
    s:18:”protect_user_group”;a:1:{i:0;s:36:”bd973b89-1b88-407c-a9f3-4024b13c5e0f”,}
    This whole string is concatenated values (not sure what sort of encoding this is, must be a common library)
    Where
    s means a string key name
    18 = length of the key name protect_user_group
    a means a tuple of values
    1 means there is one tuple
    i:0 index 0 (the first key value)
    s:36 a string of 36 bytes
    bd973… a uuid of the group to protect with 2fa

    To change this to
    s:18:"protect_user_group";a:0:{}

    ie, no groups are protected by 2fa

    MySQL doesn’t support Regexp_Replace, but MariaDB does
    UPDATEwp_optionsset option_value = REGEXP_REPLACE(option_value, 's:18:"protect_user_group";a:\d*:{(.*?)}', 's:18:"protect_user_group";a:0:{}') where option_name = 'itsec-storage';

The topic ‘Disable ithemes security two factor authentication via database’ is closed to new replies.