Add htconfig setting to disable password_exposed()

This commit is contained in:
Hypolite Petovan 2018-03-21 02:35:28 -04:00
commit 5b4fb945a2
2 changed files with 2 additions and 1 deletions

View file

@ -390,7 +390,7 @@ function settings_post(App $a)
$err = true;
}
if (User::isPasswordExposed($newpass)) {
if (!$a->getConfigValue('system', 'disable_password_exposed', false) && User::isPasswordExposed($newpass)) {
notice(L10n::t('The new password has been exposed in a public data dump, please choose another.') . EOL);
$err = true;
}