From cbd22c5ee0b742cbf4cdff583e5547f7f135e4f3 Mon Sep 17 00:00:00 2001
From: Robbie Antenesse <dev@alamantus.com>
Date: Fri, 7 Jun 2019 17:00:55 -0600
Subject: [PATCH] Fix User->upgradePassword() missing user

---
 src/php/api/User.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/php/api/User.php b/src/php/api/User.php
index 22c1099..784b9fd 100644
--- a/src/php/api/User.php
+++ b/src/php/api/User.php
@@ -18,7 +18,7 @@ class User {
     if ($user) {
       if ($user['old_password'] !== null) {
         if ($user['old_password'] === crypt($password, $email)) {
-          if ($this->upgradePassword($password)) {
+          if ($this->upgradePassword($password, $user)) {
             return $this->logIn($email, $password);
           }
         }
@@ -349,7 +349,7 @@ VALUES (?, ?, ?, ?, current_timestamp())';
     return $this->db->query($current_membership)->rowCount() > 0;
   }
 
-  private function upgradePassword ($password) {
+  private function upgradePassword($password, $user) {
     $new_password = password_hash($password, PASSWORD_DEFAULT);
     $update_query = 'UPDATE users SET old_password=NULL, password=? WHERE id=' . $user['id'];
     $stmt = $this->db->query($update_query, array($new_password));