Merge pull request #18 from Trellmor/for-balu/changepwd

Password wasn't hashed before saving it in the database
balu-master 0.13.1
balu 10 years ago
commit ad6e57a8c6

@ -244,7 +244,8 @@
log_error("user.php: POST password "); log_error("user.php: POST password ");
//to do //to do
// change pw in db // change pw in db
if($db->change_password($new_pwd)) $hash = WeaveHashFactory::factory();
if($db->change_password($hash->hash($new_pwd)))
exit("success"); exit("success");
else else
report_problem(WEAVE_ERROR_INVALID_PROTOCOL, 503); //server db messed up somehow report_problem(WEAVE_ERROR_INVALID_PROTOCOL, 503); //server db messed up somehow

Loading…
Cancel
Save