Commit f7f5857f authored by Byron Jones's avatar Byron Jones

Bug 1009017: users are unable to log in if their password needs to be

re-encrypted and their password does not match the current complexity rule r=dkl, a=glob
parent a7c6e8a5
...@@ -68,7 +68,9 @@ sub check_credentials { ...@@ -68,7 +68,9 @@ sub check_credentials {
# whatever hashing system we're using now. # whatever hashing system we're using now.
my $current_algorithm = PASSWORD_DIGEST_ALGORITHM; my $current_algorithm = PASSWORD_DIGEST_ALGORITHM;
if ($real_password_crypted !~ /{\Q$current_algorithm\E}$/) { if ($real_password_crypted !~ /{\Q$current_algorithm\E}$/) {
$user->set_password($password); # We can't call $user->set_password because we don't want the password
# complexity rules to apply here.
$user->{cryptpassword} = bz_crypt($password);
$user->update(); $user->update();
} }
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment