fixed a minor thing with the hotp skew
[ga4php.git] / lib / ga4php.php
index a052575..3435d03 100644 (file)
@@ -147,7 +147,7 @@ abstract class GoogleAuthenticator {
                switch($ttype) {
                        case "HOTP":
                                error_log("in hotp");
-                               $st = $tlid;
+                               $st = $tlid+1;
                                $en = $tlid+$this->hotpSkew;
                                for($i=$st; $i<$en; $i++) {
                                        $stest = $this->oath_hotp($tkey, $i);