summaryrefslogtreecommitdiffstats
path: root/settings
diff options
context:
space:
mode:
authorJoas Schilling <coding@schilljs.com>2016-09-19 16:14:51 +0200
committerLukas Reschke <lukas@statuscode.ch>2016-11-18 11:57:16 +0100
commit28ddf3abdbe481b8714bdd2bc9dad43c805680e4 (patch)
tree4a5533bd996b581216f8daaffe7fd0b8d38b2c1c /settings
parent827b6a610e877969f8b6ab294f71a27657788ef0 (diff)
downloadnextcloud-server-28ddf3abdbe481b8714bdd2bc9dad43c805680e4.tar.gz
nextcloud-server-28ddf3abdbe481b8714bdd2bc9dad43c805680e4.zip
Require password confirmation for changing the email
Signed-off-by: Joas Schilling <coding@schilljs.com>
Diffstat (limited to 'settings')
-rw-r--r--settings/Controller/UsersController.php1
-rw-r--r--settings/templates/personal.php1
2 files changed, 2 insertions, 0 deletions
diff --git a/settings/Controller/UsersController.php b/settings/Controller/UsersController.php
index fde29de3598..4c732a94c9a 100644
--- a/settings/Controller/UsersController.php
+++ b/settings/Controller/UsersController.php
@@ -495,6 +495,7 @@ class UsersController extends Controller {
*
* @NoAdminRequired
* @NoSubadminRequired
+ * @PasswordConfirmationRequired
*
* @param string $id
* @param string $mailAddress
diff --git a/settings/templates/personal.php b/settings/templates/personal.php
index 69d3660477d..94d4a39185f 100644
--- a/settings/templates/personal.php
+++ b/settings/templates/personal.php
@@ -91,6 +91,7 @@ if($_['displayNameChangeSupported']) {
</h2>
<input type="email" name="email" id="email" value="<?php p($_['email']); ?>"
placeholder="<?php p($l->t('Your email address'));?>"
+ class="password-confirm-required"
autocomplete="on" autocapitalize="off" autocorrect="off" />
<span class="msg"></span><br />
<em><?php p($l->t('For password recovery and notifications'));?></em>