archive/httpcb
Archived
1
0
Fork 0
Code Releases Activity

app/controllers/UserController.php: in settingsAction() create password link for new passwords.

Browse source
This commit is contained in:
Henrik Hautakoski 2018-06-12 00:34:22 +02:00
parent 552af58c7f
commit b6074cf3ef
1 changed files with 24 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

26
app/controllers/UserController.php
View file

@ -4,7 +4,8 @@ namespace App\Controller;
use App\Controller\ControllerBase,
App\Form\UserSettings as UserSettingsForm,
App\Model\Data\ActivityLog;
App\Model\Data\ActivityLog,
App\Model\Data\PasswordLink;
class UserController extends ControllerBase
{
@ -21,9 +22,30 @@ class UserController extends ControllerBase
$new_pw = $form->getValue('passwordNew');
if (strlen($new_pw) > 0) {
$hash = password_hash($new_pw, PASSWORD_BCRYPT);
$user->setPassword($hash);
// User had a password before. just update.
if (strlen($user->getPassword()) > 0) {
$user->setPassword($hash);
}
// Else we create a password link and email.
else {
$link = new PasswordLink();
$link->setUserId($user->getId())
->setPassword($hash)
->save();
// TODO: Send the email here.
$msg = "For security reasons. Before a password can be created "
. "a email has been sent to <strong>{$user->getEmail()}</strong> with "
. "a activation link.";
$this->flash->notice($msg);
}
}
$user->save();
$form->initialize();