Pman/Login.php
authorAlan Knowles <alan@roojs.com>
Fri, 7 Dec 2018 02:33:36 +0000 (10:33 +0800)
committerAlan Knowles <alan@roojs.com>
Fri, 7 Dec 2018 02:33:36 +0000 (10:33 +0800)
Pman/Login.php

index 4aa9e10..a81d6aa 100644 (file)
@@ -262,11 +262,13 @@ class Pman_Login extends Pman
                empty($_REQUEST['ts']) ||
                empty($_REQUEST['key']) ||
                empty($_REQUEST['password1']) ||
-               empty($_REQUEST['password2'])
+               empty($_REQUEST['password2']) ||
+               ($_REQUEST['password1'] != $_REQUEST['password2'])
            ) {
                $this->jerr("Invalid request to reset password");
            }
-           $this->resetPassword()
+           
+           $this->resetPassword($_REQUEST['id'], $_REQUEST['ts'], $_REQUEST['key'], $_REQUEST['password1'] );
        }
        
        // this is 'classic' change password...