diff options
author | Lukas Reschke <lukas@statuscode.ch> | 2012-10-15 16:50:41 +0200 |
---|---|---|
committer | Daniel Molkentin <daniel@molkentin.de> | 2012-10-15 17:44:44 +0200 |
commit | e6b8153865a521a4750ec44016c5f22f453edfe1 (patch) | |
tree | 3eaaa34fd660750f78a91e387b169b567090f714 | |
parent | 6b39b80648ea022cfb5839d1ac415912cafaa417 (diff) | |
download | nextcloud-server-e6b8153865a521a4750ec44016c5f22f453edfe1.tar.gz nextcloud-server-e6b8153865a521a4750ec44016c5f22f453edfe1.zip |
Remove old password check from changepassword and use verifyUser instead
-rw-r--r-- | settings/ajax/changepassword.php | 3 | ||||
-rw-r--r-- | settings/templates/personal.php | 5 |
2 files changed, 3 insertions, 5 deletions
diff --git a/settings/ajax/changepassword.php b/settings/ajax/changepassword.php index 5eab751b04e..5d94497ce58 100644 --- a/settings/ajax/changepassword.php +++ b/settings/ajax/changepassword.php @@ -10,7 +10,6 @@ OC_JSON::verifyUser(); $username = isset($_POST["username"]) ? $_POST["username"] : OC_User::getUser(); $password = $_POST["password"]; -$oldPassword=isset($_POST["oldpassword"])?$_POST["oldpassword"]:''; $userstatus = null; if(OC_Group::inGroup(OC_User::getUser(), 'admin')) { @@ -19,7 +18,7 @@ if(OC_Group::inGroup(OC_User::getUser(), 'admin')) { if(OC_SubAdmin::isUserAccessible(OC_User::getUser(), $username)) { $userstatus = 'subadmin'; } -if(OC_User::getUser() == $username && OC_User::checkPassword($username, $oldPassword)) { +if(OC_User::getUser() == $username) { $userstatus = 'user'; } diff --git a/settings/templates/personal.php b/settings/templates/personal.php index 55ff24b4223..0683bd3b64f 100644 --- a/settings/templates/personal.php +++ b/settings/templates/personal.php @@ -18,9 +18,8 @@ <fieldset class="personalblock"> <div id="passwordchanged"><?php echo $l->t('Your password was changed');?></div> <div id="passworderror"><?php echo $l->t('Unable to change your password');?></div> - <input type="password" id="pass1" name="oldpassword" placeholder="<?php echo $l->t('Current password');?>" /> - <input type="password" id="pass2" name="password" placeholder="<?php echo $l->t('New password');?>" data-typetoggle="#show" /> - <input type="checkbox" id="show" name="show" /><label for="show"><?php echo $l->t('show');?></label> + <input type="password" id="pass1" name="password" placeholder="<?php echo $l->t('New password');?>" data-typetoggle="#show" /> + <input type="password" id="pass2" name="password" placeholder="<?php echo $l->t('Verify password');?>" data-typetoggle="#show" /> <input id="passwordbutton" type="submit" value="<?php echo $l->t('Change password');?>" /> </fieldset> </form> |