external/aurweb
0
0
Fork 0
mirror of https://gitlab.archlinux.org/archlinux/aurweb.git synced 2025-02-03 10:43:03 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Require password when changing account information

Browse source 
Since commits daee20c (Require current password when setting a new one,
2020-01-30) and 8fc8898 (Require password when deleting an account,
2020-01-30), changing a password and deleting an account require the
current password. Extend this to all other profile changes.

Signed-off-by: Lukas Fleischer <lfleischer@archlinux.org>
This commit is contained in:
Lukas Fleischer 2020-01-30 14:00:07 +01:00
parent 8fc8898fef
commit def2787b45
4 changed files with 21 additions and 24 deletions
Download patch file Download diff file Expand all files Collapse all files

5
web/html/account.php
View file

@ -34,7 +34,6 @@ if ($action == "UpdateAccount") {
in_request("S"),
in_request("E"),
in_request("H"),
in_request("PO"),
in_request("P"),
in_request("C"),
in_request("R"),
@ -49,7 +48,9 @@ if ($action == "UpdateAccount") {
in_request("UN"),
in_request("ON"),
in_request("ID"),
$row["Username"]);
$row["Username"],
in_request("passwd")
);
}
}

4
web/html/register.php
View file

@ -26,7 +26,6 @@ if (in_request("Action") == "NewAccount") {
in_request("H"),
'',
'',
'',
in_request("R"),
in_request("L"),
in_request("TZ"),
@ -40,6 +39,7 @@ if (in_request("Action") == "NewAccount") {
in_request("ON"),
0,
"",
'',
in_request("captcha_salt"),
in_request("captcha"),
);
@ -55,7 +55,6 @@ if (in_request("Action") == "NewAccount") {
in_request("H"),
'',
'',
'',
in_request("R"),
in_request("L"),
in_request("TZ"),
@ -69,6 +68,7 @@ if (in_request("Action") == "NewAccount") {
in_request("ON"),
0,
"",
'',
in_request("captcha_salt"),
in_request("captcha")
);