From c404148f9a1c33c1b8966653f4bc37fe2a44a285 Mon Sep 17 00:00:00 2001
From: Lukas Reschke <lukas@statuscode.ch>
Date: Tue, 16 Oct 2012 00:43:19 +0200
Subject: [PATCH] Password check for admins
---
settings/ajax/changepassword.php | 8 ++++++--
1 file changed, 6 insertions(+), 2 deletions(-)
diff --git a/settings/ajax/changepassword.php b/settings/ajax/changepassword.php
index b797fcf9185..822a95c1bc2 100644
--- a/settings/ajax/changepassword.php
+++ b/settings/ajax/changepassword.php
@@ -19,10 +19,14 @@ if(OC_SubAdmin::isUserAccessible(OC_User::getUser(), $username)) {
$userstatus = 'subadmin';
}
if(OC_User::getUser() === $username) {
- if (OC_User::checkPassword($username, $oldPassword) && ($userstatus === null || !OC_JSON::isUserVerified()))
+ if (OC_User::checkPassword($username, $oldPassword))
{
$userstatus = 'user';
- }
+ } else {
+ if (!OC_JSON::isUserVerified()) {
+ $userstatus = null;
+ }
+ }
}
if(is_null($userstatus)) {
--
GitLab