mirrors/Piwigo
1
0
Fork 0
mirror of https://github.com/Piwigo/Piwigo.git synced 2025-04-28 04:09:56 +03:00
Code Issues Projects Releases Packages Wiki Activity Actions

(cp 34296598d) fixes #2281 add two default conf for reset and activation link

Browse source 
When a password activation or reset link is generated, the link expiry time is now defined in two conf: $conf[’password_reset_duration‘] with a default time of one hour and $conf[’password_activation_duration‘] with a default time of 72 hours.
This commit is contained in:
Linty 2024-11-25 11:29:39 +01:00
parent 668104d1c7
commit 502ef05df4
10 changed files with 72 additions and 37 deletions
Download patch file Download diff file Expand all files Collapse all files

26
include/functions_user.inc.php
View file

@ -1740,14 +1740,19 @@ function deactivate_password_reset_key($user_id)
*
* @since 15
* @param int $user_id
* @param string $user_email
* @return array activation_key and reset password link
* @param boolean $first_login
* @return array time_validation and password link
*/
function generate_reset_password_link($user_id)
function generate_password_link($user_id, $first_login=false)
{
global $conf;
$activation_key = generate_key(20);
list($expire) = pwg_db_fetch_row(pwg_query('SELECT ADDDATE(NOW(), INTERVAL 1 HOUR)'));
$duration = $first_login
? $conf['password_activation_duration']
: $conf['password_reset_duration'];
list($expire) = pwg_db_fetch_row(pwg_query('SELECT ADDDATE(NOW(), INTERVAL '. $duration .' SECOND)'));
single_update(
USER_INFOS_TABLE,
@ -1760,13 +1765,20 @@ function generate_reset_password_link($user_id)
set_make_full_url();
$reset_password_link = get_root_url().'password.php?key='.$activation_key;
$password_link = get_root_url().'password.php?key='.$activation_key;
unset_make_full_url();
$time_validation = time_since(
strtotime('now -'.$duration.' second'),
'second',
null,
false
);
return array(
'activation_key' => $activation_key,
'reset_password_link' => $reset_password_link,
'time_validation' => $time_validation,
'password_link' => $password_link,
);
}