summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorSteffen185 <steffen.weber@gmail.com>2013-03-22 15:16:45 +0100
committerSteffen185 <steffen.weber@gmail.com>2013-03-22 15:16:45 +0100
commit6f7eafce186b7310598eaa69e1f35119f2a13a7a (patch)
tree5489408a6c28ed80d190e8efdd094224095369a0
parent3d525ffaf5b36fc74c5a9fa9ed317bcfdd32e19a (diff)
Save new password even if it has not changed
I have recently changed the password scheme of my Dovecot/Postfix/Roundcube installation. New passwords are encrypted stronger than before. It is not possible to automatically update existing passwords (because the old encryption is not so bad that I can easily crack it). But I'd like to tell my users that they can upgrade to the new password scheme by simply submitting the "change password" form with their old password in all three input fields. Currently a minor optimization prevents this. I think this minor optimization should be removed.
-rw-r--r--plugins/password/password.php4
1 files changed, 0 insertions, 4 deletions
diff --git a/plugins/password/password.php b/plugins/password/password.php
index 39020a0bf..ec5bac3a9 100644
--- a/plugins/password/password.php
+++ b/plugins/password/password.php
@@ -146,10 +146,6 @@ class password extends rcube_plugin
else if ($check_strength && (!preg_match("/[0-9]/", $newpwd) || !preg_match("/[^A-Za-z0-9]/", $newpwd))) {
$rcmail->output->command('display_message', $this->gettext('passwordweak'), 'error');
}
- // password is the same as the old one, do nothing, return success
- else if ($sespwd == $newpwd) {
- $rcmail->output->command('display_message', $this->gettext('successfullysaved'), 'confirmation');
- }
// try to save the password
else if (!($res = $this->_save($curpwd, $newpwd))) {
$rcmail->output->command('display_message', $this->gettext('successfullysaved'), 'confirmation');