From f3314d106ab82d72e529822e163f3d9258c4b2b1 Mon Sep 17 00:00:00 2001 From: Henrik Hautakoski Date: Thu, 22 Jul 2021 18:54:39 +0200 Subject: [PATCH] app/Http/Controllers/ProfileController.php: in update() do not create hash for empty password. --- app/Http/Controllers/ProfileController.php | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/app/Http/Controllers/ProfileController.php b/app/Http/Controllers/ProfileController.php index 75fc514..0746295 100644 --- a/app/Http/Controllers/ProfileController.php +++ b/app/Http/Controllers/ProfileController.php @@ -29,7 +29,9 @@ class ProfileController extends Controller $user = $request->user(); $user->fill($data->except('password')->toArray()); - $user->password = Hash::make($data['password']); + if (strlen($data['password'])) { + $user->password = Hash::make($data['password']); + } $user->save(); return redirect()->route('profile.index')