Merge pull request #18 from Trellmor/for-balu/changepwd

Password wasn't hashed before saving it in the database
10 years ago · ad6e57a8c6
parent 8bbcbd00a1 b22f18d5e5
commit ad6e57a8c6
1 changed files with 2 additions and 1 deletions
--- a/user.php
+++ b/user.php
@ -244,7 +244,8 @@
                   log_error("user.php: POST password ");
                  //to do
                  // change pw in db
-                  if($db->change_password($new_pwd))
+                  $hash = WeaveHashFactory::factory();
+                  if($db->change_password($hash->hash($new_pwd)))
                    exit("success"); 
                  else
                    report_problem(WEAVE_ERROR_INVALID_PROTOCOL, 503); //server db messed up somehow