mirror/php-auth
1
0
Fork 0
mirror of https://github.com/delight-im/PHP-Auth.git synced 2025-08-03 14:47:30 +02:00
Code Issues Releases Wiki Activity

Force logout in any open sessions when a user resets their password

Browse Source
This commit is contained in:
Marco
2018-03-25 03:42:36 +02:00
parent a7c1ebcc9f
commit 25f7a8908d
1 changed files with 1 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
src/Auth.php
View File

@@ -1248,12 +1248,8 @@ final class Auth extends UserManager {
if (\password_verify($token, $resetData['token'])) { if (\password_verify($token, $resetData['token'])) {
if ($resetData['expires'] >= \time()) { if ($resetData['expires'] >= \time()) {
$newPassword = self::validatePassword($newPassword); $newPassword = self::validatePassword($newPassword);
// update the password in the database
$this->updatePasswordInternal($resetData['user'], $newPassword); $this->updatePasswordInternal($resetData['user'], $newPassword);
$this->forceLogoutForUserById($resetData['user']);
// delete any remaining remember directives
$this->deleteRememberDirectiveForUserById($resetData['user']);
try { try {
$this->db->delete( $this->db->delete(