beenull/servnest
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

auth/username auth/unregister: password confirmation

Browse source
This commit is contained in:
Miraty 2023-03-09 14:23:28 +01:00
parent abb9aabf5b
commit ca0759c8ab
4 changed files with 14 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
pg-act/auth/unregister.php
View file

@ -1,5 +1,8 @@
<?php <?php
if (checkPassword($_SESSION['id'], $_POST['current-password']) !== true)
output(403, _('Wrong current password.'));
if (!isset($_POST['delete'])) if (!isset($_POST['delete']))
output(403, _('Account deletion must be confirmed.')); output(403, _('Account deletion must be confirmed.'));

3
pg-act/auth/username.php
View file

@ -2,6 +2,9 @@
checkUsernameFormat($_POST['new-username']); checkUsernameFormat($_POST['new-username']);
if (checkPassword($_SESSION['id'], $_POST['current-password']) !== true)
output(403, _('Wrong current password.'));
$username = hashUsername($_POST['new-username']); $username = hashUsername($_POST['new-username']);
if (usernameExists($username) !== false) if (usernameExists($username) !== false)

7
pg-view/auth/unregister.php
View file

@ -3,8 +3,11 @@
</p> </p>
<form method="post"> <form method="post">
<label for="current-password"><?= _('Current password') ?></label><br>
<input required="" autocomplete="current-password" minlength="8" maxlength="1024" pattern="<?= PASSWORD_REGEX ?>" id="current-password" name="current-password" type="password" placeholder="<?= PLACEHOLDER_PASSWORD ?>"><br>
<input type="checkbox" name="delete" id="delete" required=""> <input type="checkbox" name="delete" id="delete" required="">
<label for="delete"><?= _('Delete the current account and everything related (required)') ?></label> <label for="delete"><?= _('Delete the current account and everything related (required)') ?></label><br>
<br>
<input type="submit" value="<?= _('Delete') ?>"> <input type="submit" value="<?= _('Delete') ?>">
</form> </form>

3
pg-view/auth/username.php
View file

@ -1,4 +1,7 @@
<form method="post"> <form method="post">
<label for="current-password"><?= _('Current password') ?></label><br>
<input required="" autocomplete="current-password" minlength="8" maxlength="1024" pattern="<?= PASSWORD_REGEX ?>" id="current-password" name="current-password" type="password" placeholder="<?= PLACEHOLDER_PASSWORD ?>"><br>
<label for="new-username"><?= _('New username') ?></label><br> <label for="new-username"><?= _('New username') ?></label><br>
<input required="" autocomplete="username" minlength="1" maxlength="1024" pattern="<?= USERNAME_REGEX ?>" id="new-username" name="new-username" type="text" placeholder="<?= PLACEHOLDER_USERNAME ?>"><br> <input required="" autocomplete="username" minlength="1" maxlength="1024" pattern="<?= USERNAME_REGEX ?>" id="new-username" name="new-username" type="text" placeholder="<?= PLACEHOLDER_USERNAME ?>"><br>