oldkid/friendica
1
0
Fork 0
mirror of https://git.sekbaer.de/Friendica/friendica.git synced 2025-06-16 20:05:14 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Add exposed password check to manual password change

Browse source
This commit is contained in:
Hypolite Petovan 2018-03-21 01:33:35 -04:00
parent d34a92ab2b
commit ca13570251
2 changed files with 19 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

5
mod/settings.php
View file

@ -390,6 +390,11 @@ function settings_post(App $a)
$err = true;
}
if (User::checkPasswordExposed($newpass)) {
notice(L10n::t('The new password has been exposed in a public data dump, please choose another.') . EOL);
$err = true;
}
// check if the old password was supplied correctly before changing it to the new value
if (!User::authenticate(intval(local_user()), $_POST['opassword'])) {
notice(L10n::t('Wrong password.') . EOL);