makary/phpbb
1
0
Fork 0
mirror of https://github.com/phpbb/phpbb.git synced 2025-06-07 20:08:53 +00:00
Code Issues Projects Releases Packages Wiki Activity

[ticket/security/274] Reset login keys/session when resetting password

Browse source 
SECURITY-274
This commit is contained in:
Marc Alexander 2022-10-22 14:13:36 +02:00
parent 67c41633a2
commit 827c135cc9
No known key found for this signature in database
GPG key ID: 50E0D2423696F995
1 changed files with 1 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
phpBB/phpbb/ucp/controller/reset_password.php
View file

@ -415,6 +415,7 @@ class reset_password
SET ' . $this->db->sql_build_array('UPDATE', $sql_ary) . '
WHERE user_id = ' . (int) $user_row['user_id'];
$this->db->sql_query($sql);
$this->user->reset_login_keys();
$this->log->add('user', $user_row['user_id'], $this->user->ip, 'LOG_USER_NEW_PASSWORD', false, [
'reportee_id' => $user_row['user_id'],
$user_row['username']