nsinnovations/fusionpbx
2
0
Fork 0
mirror of https://github.com/fusionpbx/fusionpbx.git synced 2026-04-04 23:49:57 +00:00
Code Issues Packages Projects Releases Wiki Activity

Remove remember me tokens when password is updated (#7759)

Browse Source 
* Update user_edit.php

* Update user_profile.php
This commit is contained in:
Alex
2026-02-26 17:02:56 -07:00
committed by GitHub
parent c095138d50
commit 82f339c4a0
2 changed files with 21 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
core/users/user_edit.php
View File

@@ -533,10 +533,20 @@
unlink(session_save_path() . "/sess_" . $row['session_id']);
}
}
unset($sql, $parameters);
//create a one way hash for the user password
$array['users'][$x]['password'] = password_hash($password, PASSWORD_DEFAULT, $options);
$array['users'][$x]['salt'] = null;
//remove remember me tokens
$sql = "update v_user_logs ";
$sql .= "set remember_selector = null, ";
$sql .= "remember_validator = null ";
$sql .= "where user_uuid = :user_uuid ";
$parameters['user_uuid'] = $user_uuid;
$database->execute($sql, $parameters);
unset($sql, $parameters);
}
$array['users'][$x]['user_email'] = $user_email;
$array['users'][$x]['user_status'] = $user_status;

12
core/users/user_profile.php
View File

@@ -17,7 +17,7 @@
The Initial Developer of the Original Code is
Mark J Crane <markjcrane@fusionpbx.com>
Portions created by the Initial Developer are Copyright (C) 2008-2025
Portions created by the Initial Developer are Copyright (C) 2008-2026
the Initial Developer. All Rights Reserved.
Contributor(s):
@@ -404,6 +404,16 @@
//create a one way hash for the user password
$array['users'][$x]['password'] = password_hash($password, PASSWORD_DEFAULT, $options);
$array['users'][$x]['salt'] = null;
//remove remember me tokens
setcookie('remember', '', time() - 3600, '/');
$sql = "update v_user_logs ";
$sql .= "set remember_selector = null, ";
$sql .= "remember_validator = null ";
$sql .= "where user_uuid = :user_uuid ";
$parameters['user_uuid'] = $user_uuid;
$database->execute($sql, $parameters);
unset($sql, $parameters);
}
$array['users'][$x]['user_email'] = $user_email;
$array['users'][$x]['user_status'] = $user_status;