[FEATURE] Ask for old password when changing 24/10224/12
authorGeorg Ringer <mail@ringerge.org>
Thu, 25 Dec 2014 20:36:03 +0000 (21:36 +0100)
committerHelmut Hummel <helmut.hummel@typo3.org>
Mon, 9 Mar 2015 15:14:17 +0000 (16:14 +0100)
commitbf6f5226eb6cb441bb53657a88ef42f1cdb5155f
tree09240abb0dbc30529802b28e9ff7688f6bd1ca6a
parentad82267b197b14bb82977eb3c062e4770a034db3
[FEATURE] Ask for old password when changing

Following security best practices, a user should
to be able to update his password only when giving
the previous password. Currently no need to know
the current password when changing it.

Change-Id: Id0c52d8f7e0d06177c0e4f7076b71d5e6fbca466
Resolves: #35807
Releases: master
Reviewed-on: http://review.typo3.org/10224
Reviewed-by: Markus Klein <klein.t3@reelworx.at>
Tested-by: Markus Klein <klein.t3@reelworx.at>
Reviewed-by: Frederic Gaus <frederic.gaus@flagbit.de>
Tested-by: Frederic Gaus <frederic.gaus@flagbit.de>
Reviewed-by: Nicole Cordes <typo3@cordes.co>
Tested-by: Nicole Cordes <typo3@cordes.co>
Reviewed-by: Helmut Hummel <helmut.hummel@typo3.org>
typo3/sysext/rsaauth/Classes/Hook/UserSetupHook.php
typo3/sysext/rsaauth/Resources/Public/JavaScript/rsaauth.js
typo3/sysext/rsaauth/Resources/Public/JavaScript/rsaauth_min.js
typo3/sysext/setup/Classes/Controller/SetupModuleController.php
typo3/sysext/setup/ext_tables.php
typo3/sysext/setup/mod/locallang.xlf