narc0tiq / narc-dot-ro Goto Github PK

Simplest would probably be to have a config setting named "ignore-login" which, if true, will bypass the normal login requirements. This gives the admin a chance to add themselves before toggling the flag back to false.

Alternatively, we can create a default admin user with either a fixed or blank password as part of creating the users table -- then the admin can log in using these fixed credentials and create their real user or edit the admin password, if they're happy with the username.

...of course, that implies that there be a way to create/update/delete users, and right now even the "change password" link doesn't actually work. Long term goal because I don't really need it myself -- I just created the user by dropping in a call to $sql->add_user as part of testing that it worked.