Changeset 2659

Show
Ignore:
Timestamp:
02/01/10 23:13:31 (6 weeks ago)
Author:
benjamin
Message:

password policy enforcment for alternc accounts password change

Location:
alternc/trunk/bureau/class
Files:
2 modified

Legend:

Unmodified
Added
Removed

  • alternc/trunk/bureau/class/m_admin.php

    r2632 r2659  
    827827  function dom_list() { 
    828828    global $db; 
    829     $db->query("SELECT m.uid,m.login,d.domaine,d.gesdns,d.gesmx,d.noerase FROM domaines d LEFT JOIN membres m ON m.uid=d.compte ORDER BY domaine;"); 
     829    $db->query("SELECT m.login,d.domaine,d.gesdns,d.gesmx,d.noerase FROM domaines d LEFT JOIN membres m ON m.uid=d.compte ORDER BY domaine;"); 
    830830    while ($db->next_record()) { 
    831831      $c[]=$db->Record; 
    … …  
    11321132      $logins[]=$login; 
    11331133      foreach($logins as $l) { 
    1134         if (strpos($l,$password)!==false) { 
     1134        if (strpos($password,$l)!==false) { 
    11351135          $err->raise("admin",17); 
    11361136          return false; 

  • alternc/trunk/bureau/class/m_mem.php

    r2615 r2659  
    291291   */ 
    292292  function passwd($oldpass,$newpass,$newpass2) { 
    293     global $db,$err,$cuid; 
     293    global $db,$err,$cuid,$admin; 
    294294    $err->log("mem","passwd"); 
    295295    $oldpass=stripslashes($oldpass); 
    … …  
    311311      $err->raise("mem",8); 
    312312      return false; 
     313    } 
     314    $db->query("SELECT login FROM membres WHERE uid='$cuid';");    
     315    $db->next_record(); 
     316    $login=$db->Record["login"]; 
     317    if (!$admin->checkPolicy("mem",$login,$newpass)) { 
     318      return false; // The error has been raised by checkPolicy() 
    313319    } 
    314320    $newpass=_md5cr($newpass);