fixes #414, deactivate auth keys on password change

2026-06-01 20:04:51 +02:00 · 2016-02-12 20:20:12 +01:00
parent 25edfc2663
commit fbd90fa460
4 changed files with 27 additions and 0 deletions
@@ -207,6 +207,8 @@ function save_profile_from_post($userdata, &$errors)
        $fields[] = $conf['user_fields']['password'];
        // password is hashed with function $conf['password_hash']
        $data{$conf['user_fields']['password']} = $conf['password_hash']($_POST['use_new_pwd']);
+
+        deactivate_user_auth_keys($userdata['id']);
      }
      
      // username is updated only if allowed