Changeset 585 for LATMOS-Accounts-Web/lib/LATMOS/Accounts/Web/Controller/Users.pm

Timestamp:

01/12/10 19:10:45 (14 years ago)

Author:

nanardon

Message:

• website check password over cracklib

File:

• LATMOS-Accounts-Web/lib/LATMOS/Accounts/Web/Controller/Users.pm (modified) (1 diff)

LATMOS-Accounts-Web/lib/LATMOS/Accounts/Web/Controller/Users.pm

@@ -52 +52 @@
                 if ($c->req->param('passwd') eq ($c->req->param('cpasswd') || '')) {
                     my $sync = $c->model('Accounts')->sync_access;
+                    
+                    # This is widelly burk:
+                    # synchaccess do not manage connect() at time, opening a
+                    # backdoor then :\
+                    foreach ($sync->bases) { $_->{_user} = $c->user->{username} }
+                    
                     my $suser = $sync->get_object('user', $username);
-                    if ($suser && $suser->set_password($c->req->param('passwd'))) {
-                        $c->stash->{pchanged} = 1;
+                    my $msg = $c->stash->{user}->check_password($c->req->param('passwd'));
+                    if ($msg ne 'ok') {
+                        $c->stash->{pmerror} = $msg . ', mot de passe inchangé';
+                    } elsif ($suser && $suser->set_password($c->req->param('passwd'))) {
+                        $c->stash->{pmerror} = 'Mot de passe changé';
                         $sync->commit;
                     } else {
-                        $c->stash->{notchanged} = 1;
+                        $c->stash->{pmerror} = 'Erreur lors du changement de mot de passe';
                     }
                 } else {
-                    $c->stash->{pmismatch} = 1;
+                    $c->stash->{pmerror} = 'Mot de passe différents';
                 }
             }