2FA 6.0.3 security update for Dolibarr 16 to 18

On Dolibarr 16, 17 and 18, versions 6.0.2 and earlier of the module were enabled normally, but the second factor was never requested at login. The password alone was enough. The check relied on a hook that Dolibarr only provides from version 19. Installations on Dolibarr 19 to 24 are not affected.

Version 6.0.3 checks the second factor on every request, whatever the Dolibarr version. Without a validated code, pages, documents and lists redirect to the verification screen.

Updating takes three steps.

• Download 6.0.3 from your Dolistore account or from your account on this site.
• Replace the module files, then disable and re-enable the module in Setup, Modules.
• Your settings, registered devices and backup codes are kept.

The announced compatibility changes from Dolibarr 14 to 24 to Dolibarr 16 to 24. If you have any question, open a request on this site.