summaryrefslogtreecommitdiffstats
path: root/web/template/account_edit_form.php
diff options
context:
space:
mode:
authorLukas Fleischer <lfleischer@archlinux.org>2020-01-30 12:39:52 +0100
committerLukas Fleischer <lfleischer@archlinux.org>2020-01-30 13:25:15 +0100
commit7aa420d24da7e8c2c214ab421d44b4684d42e73e (patch)
tree823e389e881d53883e125dda4f9fe2e111d16e1d /web/template/account_edit_form.php
parentf090896fa1e9570715cfcdec7b23ecf95d25e936 (diff)
downloadaur-7aa420d24da7e8c2c214ab421d44b4684d42e73e.tar.gz
aur-7aa420d24da7e8c2c214ab421d44b4684d42e73e.tar.xz
Verify current password against logged in user
When changing the password of an account, instead of asking for the old password of the account, ask for the password of the currently logged in user. This allows privileged users to edit other accounts without knowing their passwords. Signed-off-by: Lukas Fleischer <lfleischer@archlinux.org>
Diffstat (limited to 'web/template/account_edit_form.php')
-rw-r--r--web/template/account_edit_form.php4
1 files changed, 2 insertions, 2 deletions
diff --git a/web/template/account_edit_form.php b/web/template/account_edit_form.php
index 25e91853..7bd233a8 100644
--- a/web/template/account_edit_form.php
+++ b/web/template/account_edit_form.php
@@ -140,9 +140,9 @@
<?php if ($A == "UpdateAccount"): ?>
<fieldset>
- <legend><?= __("If you want to change your password, enter your current passport, your new password and confirm the new password by entering it again.") ?></legend>
+ <legend><?= __("If you want to change the password, enter your current passport, the new password and confirm the new password by entering it again.") ?></legend>
<p>
- <label for="id_passwd_old"><?= __("Old password") ?>:</label>
+ <label for="id_passwd_old"><?= __("Your current password") ?>:</label>
<input type="password" size="30" name="PO" id="id_passwd_old" value="<?= $PO ?>" />
</p>