From: Bjoern Schiessle Date: Mon, 24 Nov 2014 14:44:43 +0000 (+0100) Subject: use login name to verify password X-Git-Tag: v8.0.0alpha1~246^2 X-Git-Url: https://source.dussan.org/?a=commitdiff_plain;h=1645c8f81954c6a5ada8a178b6acd6d50da318f0;p=nextcloud-server.git use login name to verify password --- diff --git a/apps/files_encryption/ajax/updatePrivateKeyPassword.php b/apps/files_encryption/ajax/updatePrivateKeyPassword.php index 0f182e93831..fa5e279b21b 100644 --- a/apps/files_encryption/ajax/updatePrivateKeyPassword.php +++ b/apps/files_encryption/ajax/updatePrivateKeyPassword.php @@ -26,9 +26,10 @@ $newPassword = $_POST['newPassword']; $view = new \OC\Files\View('/'); $session = new \OCA\Encryption\Session($view); $user = \OCP\User::getUser(); +$loginName = \OC::$server->getUserSession()->getLoginName(); // check new password -$passwordCorrect = \OCP\User::checkPassword($user, $newPassword); +$passwordCorrect = \OCP\User::checkPassword($loginName, $newPassword); if ($passwordCorrect !== false) {