external/aurweb
0
0
Fork 0
mirror of https://gitlab.archlinux.org/archlinux/aurweb.git synced 2025-02-03 10:43:03 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Show hint if password is empty during login

Browse source 
A user might have an empty password due to two reasons:

* The user just created an account and needs to set an initial password.
* The password has been reset by the administrator.

In both cases, the user might be confused as to why the login does not
work. Add a message that helps users debug the issue in both cases.

Signed-off-by: Lukas Fleischer <archlinux@cryptocrack.de>
This commit is contained in:
Lukas Fleischer 2013-03-25 02:15:12 +01:00
parent 589f506aaa
commit cd59a313b4
1 changed files with 31 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

33
web/lib/acctfuncs.inc.php
View file

@ -486,8 +486,16 @@ function try_login() {
else { else {
$login_error = "Error trying to generate session id."; $login_error = "Error trying to generate session id.";
} }
} } elseif (passwd_is_empty($userID)) {
else { $login_error = __('Your password has been reset. ' .
'If you just created a new account, please ' .
'use the link from the confirmation email ' .
'to set an initial password. Otherwise, ' .
'please request a reset key on the %s' .
'Password Reset%s page.', '<a href="' .
htmlspecialchars(get_uri('/passreset')) . '">',
'</a>');
} else {
$login_error = __("Bad username or password."); $login_error = __("Bad username or password.");
} }
} }
@ -745,6 +753,27 @@ function valid_passwd($userID, $passwd) {
return false; return false;
} }
/**
* Determine if a user's password is empty
*
* @param string $uid The user ID to check for an empty password
*
* @return bool True if the user's password is empty, otherwise false
*/
function passwd_is_empty($uid) {
$dbh = DB::connect();
$q = "SELECT * FROM Users WHERE ID = " . $dbh->quote($uid) . " ";
$q .= "AND Passwd = " . $dbh->quote('');
$result = $dbh->query($q);
if ($result->fetchColumn()) {
return true;
} else {
return false;
}
}
/** /**
* Determine if the PGP key fingerprint is valid (must be 40 hexadecimal digits) * Determine if the PGP key fingerprint is valid (must be 40 hexadecimal digits)
* *