From 04871f749f90aeaa8bfca07edf5a6cd5d3fac2bf Mon Sep 17 00:00:00 2001
From: =?utf8?q?Paul=20H=C3=A4nsch?= <paul@plutz.net>
Date: Fri, 16 Feb 2024 18:39:18 +0100
Subject: [PATCH] bugfix: faulty validation in user_update made pw change
impossible
---
users.sh | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/users.sh b/users.sh
index f616ca0..4d7965a 100755
--- a/users.sh
+++ b/users.sh
@@ -429,7 +429,7 @@ user_update(){
uid="$(POST uid)"
oldpw="$(POST oldpw)"
- pw="$(POST pw |grep -xE '.{6}')"
+ pw="$(POST pw |grep -m1 -xE '.{6,}')"
pwconfirm="$(POST pwconfirm)"
@@ -442,7 +442,7 @@ user_update(){
update_user "${uid}" password="$pw"
REDIRECT "${_BASE}${PATH_INFO}#UPDATE_SUCCESS"
else
- REDIRECT "${_BASE}${PATH_INFO}#ERROR_PWMISMATCH"
+ REDIRECT "${_BASE}${PATH_INFO}#ERROR_PW_MISMATCH"
fi
elif [ "$UID_" = "$USER_ID" ]; then
REDIRECT "${_BASE}${PATH_INFO}#ERROR_INVALID_AUTH_PASSWORD"
--
2.39.5