Bugzilla – Attachment 80391 Details for
Bug 21547
Use set_password in opac-passwd and remove sub goodkey
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
[patch]
Bug 21547: Use update_password in opac-passwd and remove sub goodkey
Bug-21547-Use-updatepassword-in-opac-passwd-and-re.patch (text/plain), 2.94 KB, created by
Marcel de Rooy
on 2018-10-11 10:07:10 UTC
(
hide
)
Description:
Bug 21547: Use update_password in opac-passwd and remove sub goodkey
Filename:
MIME Type:
Creator:
Marcel de Rooy
Created:
2018-10-11 10:07:10 UTC
Size:
2.94 KB
patch
obsolete
>From bae9aeffc3c95daaf819c983251262ffedadf967 Mon Sep 17 00:00:00 2001 >From: Marcel de Rooy <m.de.rooy@rijksmuseum.nl> >Date: Thu, 11 Oct 2018 12:00:31 +0200 >Subject: [PATCH] Bug 21547: Use update_password in opac-passwd and remove sub > goodkey >Content-Type: text/plain; charset=utf-8 > >Remove sql statement to change password by calling update_password. >Remove sub goodkey by calling C4::Auth::checkpw_hash. > >Test plan: >Try to change password in OPAC with good and bad pw. > >Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl> >--- > opac/opac-passwd.pl | 26 ++------------------------ > 1 file changed, 2 insertions(+), 24 deletions(-) > >diff --git a/opac/opac-passwd.pl b/opac/opac-passwd.pl >index 177dfb7..7c33cee 100755 >--- a/opac/opac-passwd.pl >+++ b/opac/opac-passwd.pl >@@ -46,7 +46,6 @@ my ( $template, $borrowernumber, $cookie ) = get_template_and_user( > > my $patron = Koha::Patrons->find( $borrowernumber ); > if ( C4::Context->preference("OpacPasswordChange") ) { >- my $sth = $dbh->prepare("UPDATE borrowers SET password = ? WHERE borrowernumber=?"); > if ( $query->param('Oldkey') > && $query->param('Newkey') > && $query->param('Confirm') ) >@@ -54,7 +53,7 @@ if ( C4::Context->preference("OpacPasswordChange") ) { > my $error; > my $new_password = $query->param('Newkey'); > my $confirm_password = $query->param('Confirm'); >- if ( goodkey( $dbh, $borrowernumber, $query->param('Oldkey') ) ) { >+ if ( C4::Auth::checkpw_hash( scalar $query->param('Oldkey'), $patron->password ) ) { > > if ( $new_password ne $confirm_password ) { > $template->param( 'Ask_data' => '1' ); >@@ -68,8 +67,7 @@ if ( C4::Context->preference("OpacPasswordChange") ) { > $error = 'password_has_whitespaces' if $error eq 'has_whitespaces'; > } else { > # Password is valid and match >- my $clave = hash_password( $new_password ); >- $sth->execute( $clave, $borrowernumber ); >+ $patron->update_password( $patron->userid, $new_password ); > $template->param( 'password_updated' => '1' ); > $template->param( 'borrowernumber' => $borrowernumber ); > } >@@ -111,23 +109,3 @@ $template->param( > > > output_html_with_http_headers $query, $cookie, $template->output, undef, { force_no_caching => 1 }; >- >-sub goodkey { >- my ( $dbh, $borrowernumber, $key ) = @_; >- >- my $sth = >- $dbh->prepare("SELECT password FROM borrowers WHERE borrowernumber=?"); >- $sth->execute($borrowernumber); >- if ( $sth->rows ) { >- my $hash; >- my ($stored_hash) = $sth->fetchrow; >- if ( substr($stored_hash,0,2) eq '$2') { >- $hash = hash_password($key, $stored_hash); >- } else { >- $hash = md5_base64($key); >- } >- if ( $hash eq $stored_hash ) { return 1; } >- else { return 0; } >- } >- else { return 0; } >-} >-- >2.1.4
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Diff
|
Splinter Review
Attachments on
bug 21547
:
80391
|
80393
|
80400
|
82881
|
82882
|
82883
|
83490