ston1th/kopano-webapp-passwd
1
0
Fork 0
mirror of https://github.com/dducret/kopano-webapp-passwd synced 2026-07-30 20:11:13 +02:00
Code Releases Activity

At least destroy session to force user relogin

Browse source
This commit is contained in:
Matthias Fulz 2021-06-10 16:56:21 +02:00
commit d5bbcd4625
1 changed files with 2 additions and 16 deletions
Download patch file Download diff file Expand all files Collapse all files

18
php/class.passwdmodule.php
View file

@ -139,28 +139,14 @@ class PasswdModule extends Module
if ($msg === "passwordchanged") {
// password changed successfully
// write new password to session because we don't want user to re-authenticate
session_start();
// if user has openssl module installed
if(function_exists("openssl_encrypt")) {
// In PHP 5.3.3 the iv parameter was added
if(version_compare(phpversion(), "5.3.3", "<")) {
$_SESSION['password'] = openssl_encrypt($passwd,"des-ede3-cbc",PASSWORD_KEY,0);
} else {
$_SESSION['password'] = openssl_encrypt($passwd,"des-ede3-cbc",PASSWORD_KEY,0,PASSWORD_IV);
}
}
else {
$_SESSION['password'] = $passwd;
}
session_write_close();
// send feedback to client
$this->sendFeedback(true, array(
'info' => array(
'display_message' => dgettext("plugin_passwd", 'Password is changed successfully.')
)
));
WebAppSession::getInstance()->destroy();
header("Location: /");
} else {
$errorMessage = dgettext("plugin_passwd", 'Password is not changed. Error: ' . $msg);
}