3 * StatusNet, the distributed open-source microblogging tool
9 * LICENCE: This program is free software: you can redistribute it and/or modify
10 * it under the terms of the GNU Affero General Public License as published by
11 * the Free Software Foundation, either version 3 of the License, or
12 * (at your option) any later version.
14 * This program is distributed in the hope that it will be useful,
15 * but WITHOUT ANY WARRANTY; without even the implied warranty of
16 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
17 * GNU Affero General Public License for more details.
19 * You should have received a copy of the GNU Affero General Public License
20 * along with this program. If not, see <http://www.gnu.org/licenses/>.
24 * @author Evan Prodromou <evan@status.net>
25 * @author Zach Copley <zach@status.net>
26 * @copyright 2008-2009 StatusNet, Inc.
27 * @license http://www.fsf.org/licensing/licenses/agpl-3.0.html GNU Affero General Public License version 3.0
28 * @link http://status.net/
31 if (!defined('STATUSNET') && !defined('LACONICA')) {
35 require_once INSTALLDIR.'/lib/accountsettingsaction.php';
42 * @author Evan Prodromou <evan@status.net>
43 * @author Zach Copley <zach@status.net>
44 * @license http://www.fsf.org/licensing/licenses/agpl-3.0.html GNU Affero General Public License version 3.0
45 * @link http://status.net/
48 class PasswordsettingsAction extends AccountSettingsAction
53 * @return string Title of the page
58 return _('Change password');
61 function prepare($args){
62 parent::prepare($args);
64 $user = common_current_user();
66 Event::handle('CanUserChangeField', array($user->nickname, 'password'));
68 if(! $fields['password']){
69 //user is not allowed to change his password
70 $this->clientError(_('You are not allowed to change your password'));
75 * Instructions for use
77 * @return instructions for use
80 function getInstructions()
82 return _('Change your password.');
85 function showScripts()
87 parent::showScripts();
88 $this->autofocus('oldpassword');
92 * Content area of the page
94 * Shows a form for changing the password
99 function showContent()
101 $user = common_current_user();
103 $this->elementStart('form', array('method' => 'POST',
104 'id' => 'form_password',
105 'class' => 'form_settings',
107 common_local_url('passwordsettings')));
108 $this->elementStart('fieldset');
109 $this->element('legend', null, _('Password change'));
110 $this->hidden('token', common_session_token());
113 $this->elementStart('ul', 'form_data');
114 // Users who logged in with OpenID won't have a pwd
115 if ($user->password) {
116 $this->elementStart('li');
117 $this->password('oldpassword', _('Old password'));
118 $this->elementEnd('li');
120 $this->elementStart('li');
121 $this->password('newpassword', _('New password'),
122 _('6 or more characters'));
123 $this->elementEnd('li');
124 $this->elementStart('li');
125 $this->password('confirm', _('Confirm'),
126 _('same as password above'));
127 $this->elementEnd('li');
128 $this->elementEnd('ul');
130 $this->submit('changepass', _('Change'));
132 $this->elementEnd('fieldset');
133 $this->elementEnd('form');
139 * Validate input and save changes. Reload the form with a success
145 function handlePost()
149 $token = $this->trimmed('token');
150 if (!$token || $token != common_session_token()) {
151 $this->showForm(_('There was a problem with your session token. '.
152 'Try again, please.'));
156 $user = common_current_user();
157 assert(!is_null($user)); // should already be checked
159 // FIXME: scrub input
161 $newpassword = $this->arg('newpassword');
162 $confirm = $this->arg('confirm');
166 if (strlen($newpassword) < 6) {
167 $this->showForm(_('Password must be 6 or more characters.'));
169 } else if (0 != strcmp($newpassword, $confirm)) {
170 $this->showForm(_('Passwords don\'t match.'));
174 if ($user->password) {
175 $oldpassword = $this->arg('oldpassword');
177 if (!common_check_user($user->nickname, $oldpassword)) {
178 $this->showForm(_('Incorrect old password'));
186 if(! Event::handle('ChangePassword', array($user->nickname, $oldpassword, $newpassword, &$errormsg))){
187 //no handler changed the password, so change the password internally
188 $original = clone($user);
190 $user->password = common_munge_password($newpassword, $user->id);
192 $val = $user->validate();
194 $this->showForm(_('Error saving user; invalid.'));
198 if (!$user->update($original)) {
199 $this->serverError(_('Can\'t save new password.'));
204 if($errormsg === false)
205 $this->showForm(_('Password saved.'), true);
207 $this->showForm($errormsg);