Alamantus
/
Lexiconga
mirror of https://github.com/Alamantus/Lexiconga.git
1
0
Fork 0
Code Issues Releases Activity

Fix User->upgradePassword() missing user

This commit is contained in:
Robbie Antenesse 2019-06-07 17:00:55 -06:00 committed by Robbie Antenesse
parent 118b5c2d1a
commit 828608ee0b
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
src/php/api/User.php
View File

@ -18,7 +18,7 @@ class User {
if ($user) {
if ($user['old_password'] !== null) {
if ($user['old_password'] === crypt($password, $email)) {
if ($this->upgradePassword($password)) {
if ($this->upgradePassword($password, $user)) {
return $this->logIn($email, $password);
}
}
@ -349,7 +349,7 @@ VALUES (?, ?, ?, ?, current_timestamp())';
return $this->db->query($current_membership)->rowCount() > 0;
}
private function upgradePassword ($password) {
private function upgradePassword($password, $user) {
$new_password = password_hash($password, PASSWORD_DEFAULT);
$update_query = 'UPDATE users SET old_password=NULL, password=? WHERE id=' . $user['id'];
$stmt = $this->db->query($update_query, array($new_password));