From a85c2d36580c9298d20fd6484e6048e49941508c Mon Sep 17 00:00:00 2001
From: xiaomlove <i353856593@163.com>
Date: Fri, 27 Oct 2023 01:55:59 +0800
Subject: [PATCH] prevent change password enable two step auth

---
 public/usercp.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/public/usercp.php b/public/usercp.php
index eac87740..f7b7c999 100644
--- a/public/usercp.php
+++ b/public/usercp.php
@@ -912,7 +912,7 @@ EOD;
                 $twoStepY = '<div style="display: flex;align-items:center">';
                 $twoStepY .= sprintf('<div><img src="%s" /></div>', $twoStepQrCodeUrl);
                 $twoStepY .= sprintf(
-                    '<div style="padding-left: 20px">%s<a href="%s" target="_blank">Link</a><br /><br />%s%s<br/><br/>%s<input type=hidden name=two_step_secret value="%s" /><input type=text name=two_step_code /></div>',
+                    '<div style="padding-left: 20px">%s<a href="%s" target="_blank">Link</a><br /><br />%s%s<br/><br/>%s<input type=hidden name=two_step_secret value="%s" /><input type=text name=two_step_code readonly onfocus="this.removeAttribute(\'readonly\')"/></div>',
                     $lang_usercp['text_two_step_secret_bind_by_qrdoe_note'],
                     $twoStepQrCodeUrl,
                     $lang_usercp['text_two_step_secret_bind_manually_note'],