2 # This script lets the users change the passwords by themselves.
4 # (c) 2005 Universidad ORT Uruguay.
6 # This file is part of the extensions and enhacments made to koha by Universidad ORT Uruguay
8 # Koha is free software; you can redistribute it and/or modify it
9 # under the terms of the GNU General Public License as published by
10 # the Free Software Foundation; either version 3 of the License, or
11 # (at your option) any later version.
13 # Koha is distributed in the hope that it will be useful, but
14 # WITHOUT ANY WARRANTY; without even the implied warranty of
15 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
16 # GNU General Public License for more details.
18 # You should have received a copy of the GNU General Public License
19 # along with Koha; if not, see <http://www.gnu.org/licenses>.
26 use C4
::Auth
; # checkauth, getborrowernumber.
28 use Digest
::MD5
qw(md5_base64);
32 use Koha
::AuthUtils
qw(hash_password);
35 my $dbh = C4
::Context
->dbh;
37 my ( $template, $borrowernumber, $cookie ) = get_template_and_user
(
39 template_name
=> "opac-passwd.tt",
47 # get borrower information ....
48 my ( $borr ) = GetMemberDetails
( $borrowernumber );
49 my $minpasslen = C4
::Context
->preference("minPasswordLength");
50 if ( C4
::Context
->preference("OpacPasswordChange") ) {
51 my $sth = $dbh->prepare("UPDATE borrowers SET password = ? WHERE borrowernumber=?");
52 if ( $query->param('Oldkey')
53 && $query->param('Newkey')
54 && $query->param('Confirm') )
56 if ( goodkey
( $dbh, $borrowernumber, $query->param('Oldkey') ) ) {
57 if ( $query->param('Newkey') =~ m
|^\s
+| or $query->param('Newkey') =~ m
|\s
+$| ) {
60 PasswordContainsTrailingSpaces
=> 1,
63 elsif ( $query->param('Newkey') eq $query->param('Confirm')
64 && length( $query->param('Confirm') ) >= $minpasslen )
66 my $clave = hash_password
( $query->param('Newkey') );
67 $sth->execute( $clave, $borrowernumber );
68 $template->param( 'password_updated' => '1' );
69 $template->param( 'borrowernumber' => $borrowernumber );
71 elsif ( $query->param('Newkey') ne $query->param('Confirm') ) {
72 $template->param( 'Ask_data' => '1' );
73 $template->param( 'Error_messages' => '1' );
74 $template->param( 'PassMismatch' => '1' );
76 elsif ( length( $query->param('Confirm') ) < $minpasslen ) {
77 $template->param( 'Ask_data' => '1' );
78 $template->param( 'Error_messages' => '1' );
79 $template->param( 'ShortPass' => '1' );
82 $template->param( 'Error_messages' => '1' );
86 $template->param( 'Ask_data' => '1' );
87 $template->param( 'Error_messages' => '1' );
88 $template->param( 'WrongPass' => '1' );
93 # Called Empty, Ask for data.
94 $template->param( 'Ask_data' => '1' );
95 if (!$query->param('Oldkey') && ($query->param('Newkey') || $query->param('Confirm'))){
96 # Old password is empty but one of the others isnt
97 $template->param( 'Error_messages' => '1' );
98 $template->param( 'WrongPass' => '1' );
100 elsif ($query->param('Oldkey') && (!$query->param('Newkey') || !$query->param('Confirm'))){
101 # Oldpassword is entered but one of the other fields is empty
102 $template->param( 'Error_messages' => '1' );
103 $template->param( 'PassMismatch' => '1' );
107 $template->param(firstname
=> $borr->{'firstname'},
108 surname
=> $borr->{'surname'},
109 minpasslen
=> $minpasslen,
113 output_html_with_http_headers
$query, $cookie, $template->output, undef, { force_no_caching
=> 1 };
116 my ( $dbh, $borrowernumber, $key ) = @_;
119 $dbh->prepare("SELECT password FROM borrowers WHERE borrowernumber=?");
120 $sth->execute($borrowernumber);
123 my ($stored_hash) = $sth->fetchrow;
124 if ( substr($stored_hash,0,2) eq '$2') {
125 $hash = hash_password
($key, $stored_hash);
127 $hash = md5_base64
($key);
129 if ( $hash eq $stored_hash ) { return 1; }