upstream/nextcloud
1
0
Fork 0
mirror of https://github.com/nextcloud/server.git synced 2026-05-28 04:32:30 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions 25

Verify passwords for admins

Browse source
This commit is contained in:
Lukas Reschke 2012-10-16 00:01:48 +02:00
parent 7e2d4e2a8e
commit e6c9f5d9f4
1 changed files with 11 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

14
settings/ajax/changepassword.php
View file

@ -6,7 +6,6 @@ require_once '../../lib/base.php';
// Check if we are a user
OCP\JSON::callCheck();
OC_JSON::checkLoggedIn();
OC_JSON::verifyUser();
$username = isset($_POST["username"]) ? $_POST["username"] : OC_User::getUser();
$password = $_POST["password"];
@ -19,8 +18,13 @@ if(OC_Group::inGroup(OC_User::getUser(), 'admin')) {
if(OC_SubAdmin::isUserAccessible(OC_User::getUser(), $username)) {
$userstatus = 'subadmin';
}
if(OC_User::getUser() == $username && OC_User::checkPassword($username, $oldPassword)) {
$userstatus = 'user';
if(OC_User::getUser() === $username) {
if (OC_User::checkPassword($username, $oldPassword))
{
$userstatus = 'user';
} else {
$userstatus = null;
}
}
if(is_null($userstatus)) {
@ -28,6 +32,10 @@ if(is_null($userstatus)) {
exit();
}
if($userstatus === 'admin' || $userstatus === 'subadmin') {
OC_JSON::verifyUser();
}
// Return Success story
if( OC_User::setPassword( $username, $password )) {
OC_JSON::success(array("data" => array( "username" => $username )));