mirror/php-phpbb
1
0
Fork 0
mirror of https://github.com/phpbb/phpbb.git synced 2025-07-12 20:56:40 +02:00
Code Issues Releases Wiki Activity

Merge pull request #67 from phpbb/ticket/security-274

Browse Source 
[ticket/security/274] Reset login keys/session when resetting password
This commit is contained in:
Marc Alexander
2022-11-22 21:21:24 +01:00
parent 0793126dc4 827c135cc9
commit e75ea6642d
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
phpBB/phpbb/ucp/controller/reset_password.php
View File

@ -415,6 +415,7 @@ class reset_password
SET ' . $this->db->sql_build_array('UPDATE', $sql_ary) . ' SET ' . $this->db->sql_build_array('UPDATE', $sql_ary) . '
WHERE user_id = ' . (int) $user_row['user_id']; WHERE user_id = ' . (int) $user_row['user_id'];
$this->db->sql_query($sql); $this->db->sql_query($sql);
$this->user->reset_login_keys();
$this->log->add('user', $user_row['user_id'], $this->user->ip, 'LOG_USER_NEW_PASSWORD', false, [ $this->log->add('user', $user_row['user_id'], $this->user->ip, 'LOG_USER_NEW_PASSWORD', false, [
'reportee_id' => $user_row['user_id'], 'reportee_id' => $user_row['user_id'],
$user_row['username'] $user_row['username']