maketank/Froxlor
2
0
Fork 0
Code Pull Requests Releases Activity

fix for bug #1482

Browse Source
This commit is contained in:
Andreas Grundler
2015-02-01 12:25:26 +01:00
parent e92b5e2c05
commit 28f26cce72
4 changed files with 12 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
customer_index.php
View File

@@ -99,7 +99,7 @@ if ($page == 'overview') {
} elseif ($page == 'change_password') {
if (isset($_POST['send']) && $_POST['send'] == 'send') {
$old_password = validate($_POST['old_password'], 'old password');
if (md5($old_password) != $userinfo['password']) {
if (!validatePasswordLogin($userinfo,$old_password,TABLE_PANEL_CUSTOMERS,'customerid')) {
standard_error('oldpasswordnotcorrect');
exit;
}
@@ -119,13 +119,11 @@ if ($page == 'overview') {
// Update user password
$stmt = Database::prepare("UPDATE `" . TABLE_PANEL_CUSTOMERS . "`
SET `password` = :newpassword
WHERE `customerid` = :customerid
AND `password` = :oldpassword"
WHERE `customerid` = :customerid"
);
$params = array(
"newpassword" => md5($new_password),
"customerid" => $userinfo['customerid'],
"oldpassword" => md5($old_password)
"newpassword" => makeCryptPassword($new_password),
"customerid" => $userinfo['customerid']
);
Database::pexecute($stmt, $params);
$log->logAction(USR_ACTION, LOG_NOTICE, 'changed password');