From d29a66d18bbf90fbe0b2fe419f716ff113fa51b1 Mon Sep 17 00:00:00 2001
From: Josep Piguillem <jgpigui@gmail.com>
Date: Fri, 25 Sep 2026 10:41:52 +0200
Subject: [PATCH] =?UTF-8?q?Aviso=20para=20activar=20la=20verificaci=C3=B3n?=
 =?UTF-8?q?=20en=20dos=20pasos=20(posponible=2030=20d=C3=ADas)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 wp-content/mu-plugins/gure-ametsa/admin.php | 26 +++++++++++++++++++++
 1 file changed, 26 insertions(+)

diff --git a/wp-content/mu-plugins/gure-ametsa/admin.php b/wp-content/mu-plugins/gure-ametsa/admin.php
index db0f8f2..46f2862 100644
--- a/wp-content/mu-plugins/gure-ametsa/admin.php
+++ b/wp-content/mu-plugins/gure-ametsa/admin.php
@@ -199,3 +199,29 @@ function ga_purge_messages() {
 	}
 	return count( $old );
 }
+
+/* -------------------------------------------------------------------------
+ * Seguridad: recordar la verificación en dos pasos (plugin Two Factor)
+ * ---------------------------------------------------------------------- */
+
+add_action( 'admin_notices', function () {
+	if ( ! class_exists( 'Two_Factor_Core' ) || ! current_user_can( 'edit_posts' ) ) {
+		return;
+	}
+	$user_id = get_current_user_id();
+	if ( Two_Factor_Core::is_user_using_two_factor( $user_id ) || (int) get_user_meta( $user_id, 'ga_2fa_snooze', true ) > time() ) {
+		return;
+	}
+	printf(
+		'<div class="notice notice-warning"><p><strong>Protege tu cuenta:</strong> activa la verificación en dos pasos (un código de tu móvil además de la contraseña). Tarda dos minutos. <a class="button button-primary" href="%s">Activarla</a> <a href="%s">Recordármelo en 30 días</a></p></div>',
+		esc_url( admin_url( 'profile.php#two-factor-options' ) ),
+		esc_url( wp_nonce_url( admin_url( 'admin-post.php?action=ga_2fa_snooze' ), 'ga_2fa_snooze' ) )
+	);
+} );
+
+add_action( 'admin_post_ga_2fa_snooze', function () {
+	check_admin_referer( 'ga_2fa_snooze' );
+	update_user_meta( get_current_user_id(), 'ga_2fa_snooze', time() + 30 * DAY_IN_SECONDS );
+	wp_safe_redirect( wp_get_referer() ?: admin_url() );
+	exit;
+} );