From 9efbee384b4743731bc23de8694b5bdea2739b1e Mon Sep 17 00:00:00 2001 From: alpeb Date: Sat, 11 Sep 2004 05:50:22 +0000 Subject: [PATCH] The new password wasn't being stored in the session, so it was lost when $GLOBALS['phpgw']['user'] was recreated from session info through class.session.verify. This prevented user passwords to be changed more than once per session. I'm sure this caused other bugs I'm not aware of... --- preferences/changepassword.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/preferences/changepassword.php b/preferences/changepassword.php index 2ff58fe444..5b5ef7a0c3 100755 --- a/preferences/changepassword.php +++ b/preferences/changepassword.php @@ -78,7 +78,7 @@ } else { - $GLOBALS['phpgw_info']['user']['passwd'] = $passwd_changed; + $GLOBALS['phpgw']->session->appsession('password','phpgwapi',base64_encode($n_passwd)); $GLOBALS['hook_values']['account_id'] = $GLOBALS['phpgw_info']['user']['account_id']; $GLOBALS['hook_values']['old_passwd'] = $o_passwd; $GLOBALS['hook_values']['new_passwd'] = $n_passwd;