AS1024
/
Kanboard-Prod
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Filter variables when updating user profile

This commit is contained in:
Frederic Guillot 2017-08-11 22:18:53 -07:00
parent 88dd6abbf3
commit b79b18efd7
2 changed files with 13 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
app/Controller/UserCredentialController.php
View File

@ -44,7 +44,11 @@ class UserCredentialController extends BaseController
list($valid, $errors) = $this->userValidator->validatePasswordModification($values);
if (! $this->userSession->isAdmin()) {
$values['id'] = $this->userSession->getId();
$values = array(
'id' => $this->userSession->getId(),
'password' => isset($values['password']) ? $values['password'] : '',
'confirmation' => isset($values['confirmation']) ? $values['confirmation'] : '',
);
}
if ($valid) {

11
app/Controller/UserModificationController.php
View File

@ -47,9 +47,14 @@ class UserModificationController extends BaseController
$values = $this->request->getValues();
if (! $this->userSession->isAdmin()) {
if (isset($values['role'])) {
unset($values['role']);
}
$values = array(
'id' => $this->userSession->getId(),
'username' => isset($values['username']) ? $values['username'] : '',
'name' => isset($values['name']) ? $values['name'] : '',
'email' => isset($values['email']) ? $values['email'] : '',
'timezone' => isset($values['timezone']) ? $values['timezone'] : '',
'language' => isset($values['language']) ? $values['language'] : '',
);
}
list($valid, $errors) = $this->userValidator->validateModification($values);