Question about Google Authentification (2FA) and security

[Yannick_Pavard]

Hello,

I’m using the old version of the security module, so I would like to force users to enable two-factor authentication.

In my “sc_login” page, in the “OnValidate” event section, if I add this redirect, is it safe?

   if( [sett_enable_2fa] == 'Y' && !empty({rs[0][4]})){ sc_redir('sc_control_2fa'); }
		else { sc_redir('sc_add_2fa'); }

To do this, I must to remove security on the “sc_add_2fa” page.

Is it safe too?

THANKS.