AS1024/Kanboard-Prod
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Filter variables when updating user profile

Browse Source
This commit is contained in:
Frederic Guillot
2017-08-11 22:18:53 -07:00
parent 88dd6abbf3
commit b79b18efd7
2 changed files with 13 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
app/Controller/UserCredentialController.php
View File

@@ -44,7 +44,11 @@ class UserCredentialController extends BaseController
list($valid, $errors) = $this->userValidator->validatePasswordModification($values); list($valid, $errors) = $this->userValidator->validatePasswordModification($values);
if (! $this->userSession->isAdmin()) { if (! $this->userSession->isAdmin()) {
$values['id'] = $this->userSession->getId(); $values = array(
'id' => $this->userSession->getId(),
'password' => isset($values['password']) ? $values['password'] : '',
'confirmation' => isset($values['confirmation']) ? $values['confirmation'] : '',
);
} }
if ($valid) { if ($valid) {

11
app/Controller/UserModificationController.php
View File

@@ -47,9 +47,14 @@ class UserModificationController extends BaseController
$values = $this->request->getValues(); $values = $this->request->getValues();
if (! $this->userSession->isAdmin()) { if (! $this->userSession->isAdmin()) {
if (isset($values['role'])) { $values = array(
unset($values['role']); 'id' => $this->userSession->getId(),
} 'username' => isset($values['username']) ? $values['username'] : '',
'name' => isset($values['name']) ? $values['name'] : '',
'email' => isset($values['email']) ? $values['email'] : '',
'timezone' => isset($values['timezone']) ? $values['timezone'] : '',
'language' => isset($values['language']) ? $values['language'] : '',
);
} }
list($valid, $errors) = $this->userValidator->validateModification($values); list($valid, $errors) = $this->userValidator->validateModification($values);