Configuration du mot de passe

https://github.com/marienfressinaud/FreshRSS/issues/104
This commit is contained in:
Alexandre Alapetite
2014-01-11 17:13:22 +01:00
parent eb50ab3b61
commit 43f1b227b4
4 changed files with 25 additions and 2 deletions

View File

@@ -14,8 +14,21 @@ class FreshRSS_users_Controller extends Minz_ActionController {
if (Minz_Request::isPost()) {
$ok = true;
$passwordPlain = Minz_Request::param('passwordPlain', false);
if ($passwordPlain != '') {
Minz_Request::_param('passwordPlain'); //Discard plain-text password ASAP
$_POST['passwordPlain'] = '';
if (!function_exists('password_hash')) {
include_once(LIB_PATH . '/password_compat.php');
}
$passwordHash = password_hash($passwordPlain, PASSWORD_BCRYPT); //A bit expensive, on purpose
$passwordPlain = '';
$this->view->conf->_passwordHash($passwordHash);
}
$mail = Minz_Request::param('mail_login', false);
$this->view->conf->_mail_login($mail);
$ok &= $this->view->conf->save();
$email = $this->view->conf->mail_login;