Fix password change code
This commit is contained in:
parent
cb7f8ef649
commit
7d6450706f
|
@ -953,12 +953,13 @@ if (isset($_POST['edit'])) {
|
||||||
|
|
||||||
$user = $db->db_select($query);
|
$user = $db->db_select($query);
|
||||||
|
|
||||||
if(!strcmp(md5($user_currentpass), $user[0]['user_pass'])) {
|
if (password_verify($user_currentpass, $user[0]['user_pass'])) {
|
||||||
if(!strcmp($user_newpass1, $user_newpass2)) {
|
if(!strcmp($user_newpass1, $user_newpass2)) {
|
||||||
|
$newhash = password_hash($user_newpass1, PASSWORD_BCRYPT);
|
||||||
$query = "UPDATE
|
$query = "UPDATE
|
||||||
user
|
user
|
||||||
SET
|
SET
|
||||||
user_pass='" . md5($user_newpass1) . "'
|
user_pass='" . $newhash . "'
|
||||||
WHERE
|
WHERE
|
||||||
user_id=" . $user_id;
|
user_id=" . $user_id;
|
||||||
|
|
||||||
|
|
Loading…
Reference in New Issue