Alamantus
/
Lexiconga
mirror of https://github.com/Alamantus/Lexiconga.git
1
0
Fork 0
Code Issues Releases Activity

Fix User->upgradePassword() missing user

This commit is contained in:
Robbie Antenesse 2019-06-07 17:00:55 -06:00
parent abb1854d0f
commit 4dbcb740f4
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
src/php/api/User.php
View File

@ -18,7 +18,7 @@ class User {
if ($user) { if ($user) {
if ($user['old_password'] !== null) { if ($user['old_password'] !== null) {
if ($user['old_password'] === crypt($password, $email)) { if ($user['old_password'] === crypt($password, $email)) {
if ($this->upgradePassword($password)) { if ($this->upgradePassword($password, $user)) {
return $this->logIn($email, $password); return $this->logIn($email, $password);
} }
} }
@ -349,7 +349,7 @@ VALUES (?, ?, ?, ?, current_timestamp())';
return $this->db->query($current_membership)->rowCount() > 0; return $this->db->query($current_membership)->rowCount() > 0;
} }
private function upgradePassword ($password) { private function upgradePassword($password, $user) {
$new_password = password_hash($password, PASSWORD_DEFAULT); $new_password = password_hash($password, PASSWORD_DEFAULT);
$update_query = 'UPDATE users SET old_password=NULL, password=? WHERE id=' . $user['id']; $update_query = 'UPDATE users SET old_password=NULL, password=? WHERE id=' . $user['id'];
$stmt = $this->db->query($update_query, array($new_password)); $stmt = $this->db->query($update_query, array($new_password));