mirror of
https://github.com/pelican-dev/panel.git
synced 2025-11-24 04:21:08 +01:00
Use the current_password not password field when verifying passwords.
This commit is contained in:
parent
93dc52bbc4
commit
faa437b77b
@ -82,7 +82,7 @@ class AccountController extends Controller
|
||||
|
||||
if (
|
||||
in_array($request->input('do_action'), ['email', 'password'])
|
||||
&& ! password_verify($request->input('password'), $request->user()->password)
|
||||
&& ! password_verify($request->input('current_password'), $request->user()->password)
|
||||
) {
|
||||
Alert::danger(trans('base.account.invalid_pass'))->flash();
|
||||
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user