From c27214495c24827fd9a78cda022c721f4f0753fa Mon Sep 17 00:00:00 2001 From: Marc Alexander Date: Mon, 10 Apr 2023 19:39:23 +0200 Subject: [PATCH] [ticket/17127] Remove redundant check for changed password user_password will have been updated if u_chgpasswd is yes and new password has been set, no need to check password against old hash again. PHPBB3-17127 --- phpBB/includes/ucp/ucp_profile.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/phpBB/includes/ucp/ucp_profile.php b/phpBB/includes/ucp/ucp_profile.php index 313abef868..35307cef1c 100644 --- a/phpBB/includes/ucp/ucp_profile.php +++ b/phpBB/includes/ucp/ucp_profile.php @@ -143,7 +143,7 @@ class ucp_profile )); } - if ($auth->acl_get('u_chgpasswd') && $data['new_password'] && !$passwords_manager->check($data['new_password'], $user->data['user_password'])) + if ($auth->acl_get('u_chgpasswd') && $data['new_password']) { $sql_ary['user_passchg'] = time();