fixes #414, deactivate auth keys on password change

This commit is contained in:
plegall 2016-02-12 20:20:12 +01:00
parent 25edfc2663
commit fbd90fa460
4 changed files with 27 additions and 0 deletions

View file

@ -207,6 +207,8 @@ function save_profile_from_post($userdata, &$errors)
$fields[] = $conf['user_fields']['password'];
// password is hashed with function $conf['password_hash']
$data{$conf['user_fields']['password']} = $conf['password_hash']($_POST['use_new_pwd']);
deactivate_user_auth_keys($userdata['id']);
}
// username is updated only if allowed