bitPickups/friendica_2019-12_sharedHosting_hotFix
1
1
Fork 0
Code Pull requests Activity

Add hidden password input to Console\NewPassword

Browse source 
- Add Exception when password is empty
This commit is contained in:
Hypolite Petovan 2018-04-18 22:56:52 -04:00
parent 0496822ca3
commit f65a7b3130
1 changed files with 11 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

13
src/Core/Console/NewPassword.php
View file

@ -27,7 +27,7 @@ class NewPassword extends \Asika\SimpleConsole\Console
$help = <<<HELP $help = <<<HELP
console newpassword - Creates a new password for a given user console newpassword - Creates a new password for a given user
Usage Usage
bin/console newpassword <nickname> <password> [-h|--help|-?] [-v] bin/console newpassword <nickname> [<password>] [-h|--help|-?] [-v]
Description Description
Creates a new password for a user without using the "forgot password" functionality. Creates a new password for a user without using the "forgot password" functionality.
@ -67,13 +67,22 @@ HELP;
} }
$nick = $this->getArgument(0); $nick = $this->getArgument(0);
$password = $this->getArgument(1);
$user = dba::selectFirst('user', ['uid'], ['nickname' => $nick]); $user = dba::selectFirst('user', ['uid'], ['nickname' => $nick]);
if (!DBM::is_result($user)) { if (!DBM::is_result($user)) {
throw new \RuntimeException(L10n::t('User not found')); throw new \RuntimeException(L10n::t('User not found'));
} }
$password = $this->getArgument(1);
if (is_null($password)) {
$this->out(L10n::t('Enter new password: '), false);
$password = \Seld\CliPrompt\CliPrompt::hiddenPrompt(true);
}
if (!$password) {
throw new \RuntimeException(L10n::t('Password can\'t be empty'));
}
if (!Config::get('system', 'disable_password_exposed', false) && User::isPasswordExposed($password)) { if (!Config::get('system', 'disable_password_exposed', false) && User::isPasswordExposed($password)) {
throw new \RuntimeException(L10n::t('The new password has been exposed in a public data dump, please choose another.')); throw new \RuntimeException(L10n::t('The new password has been exposed in a public data dump, please choose another.'));
} }