external/aurweb
0
0
Fork 0
mirror of https://gitlab.archlinux.org/archlinux/aurweb.git synced 2025-02-03 10:43:03 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Require password when changing account information

Browse source 
Since commits daee20c (Require current password when setting a new one,
2020-01-30) and 8fc8898 (Require password when deleting an account,
2020-01-30), changing a password and deleting an account require the
current password. Extend this to all other profile changes.

Signed-off-by: Lukas Fleischer <lfleischer@archlinux.org>
This commit is contained in:
Lukas Fleischer 2020-01-30 14:00:07 +01:00
parent 8fc8898fef
commit def2787b45
4 changed files with 21 additions and 24 deletions
Download patch file Download diff file Expand all files Collapse all files

5
web/html/account.php
View file

@ -34,7 +34,6 @@ if ($action == "UpdateAccount") {
in_request("S"),
in_request("E"),
in_request("H"),
in_request("PO"),
in_request("P"),
in_request("C"),
in_request("R"),
@ -49,7 +48,9 @@ if ($action == "UpdateAccount") {
in_request("UN"),
in_request("ON"),
in_request("ID"),
$row["Username"]);
$row["Username"],
in_request("passwd")
);
}
}