Password change required after admin change to other user data

11 years 10 months ago - 11 years 10 months ago #1 by skymaster
It appears that if admin makes a backside change to user (something other than password), the next time the user logs in he is required to change his password. I can't imagine why this would be in the design, so could this be changed to require a password change only if the admin changed the user's password.
Thank you.

Please Log in or Create an account to join the conversation.

11 years 10 months ago #2 by geoffc
I'll try and duplicate the problem. Watch this space.

If the password is changed then it is expected that the user will be forced to make a change but if the password is not changed it certainly shouldn't.

Edited by geoffc - 09.06.2012 17:49

Duplicated the problem.

I believe the following fixes the problem.

After line 432 in passwordcontrol.php add the following line:

if (empty($data)) { return true; }

So the code should read as follows:
if (!isset($data)) { return true; }
if (empty($data)) { return true; }

$session = JFactory::getSession();
etc.

I have quickly tested it and it resolves it on my test site. I will carry out more tests and it will be included in the next version 0.0.5.

Edited by geoffc - 10.06.2012 15:55

Regards
Geoff

Please Log in or Create an account to join the conversation.

Time to create page: 0.155 seconds
Go To Top

Joomla! Debug Console

Session

Profile Information

Memory Usage

Database Queries