[Koha-bugs] [Bug 29925] Add a 'set new password' page for patron's with expired passwords

[bugzilla-daemon at bugs.koha-community.org]

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29925

--- Comment #10 from Marcel de Rooy <m.de.rooy at rijksmuseum.nl> ---
(In reply to Marcel de Rooy from comment #9)
> +                if ( $newpassword ne $confirmpassword ) {
> +                    $template->param( 'error' => 'passwords_mismatch' );
> 
> If my password was 123Jim+1, and I just change to 123Jim+2, or change
> 3Jim at abc to 4Jim at abc, could we refuse such changes?
> Look for some 'large enough' string that they have in common or so?
> Or compare the number of positions where they are different?
> 
> Since this could well be considered scope creep, we could open a new report?

We needed these lines in code obviously:

+                elsif ( $currentpassword eq $newpassword ) {
+                    $template->param( 'error' => 'no_change' );

-- 
You are receiving this mail because:
You are watching all bug changes.