2 # This script lets the users change the passwords by themselves.
4 # (c) 2005 Universidad ORT Uruguay.
6 # This file is part of the extensions and enhacments made to koha by Universidad ORT Uruguay
8 # Koha is free software; you can redistribute it and/or modify it
9 # under the terms of the GNU General Public License as published by
10 # the Free Software Foundation; either version 3 of the License, or
11 # (at your option) any later version.
13 # Koha is distributed in the hope that it will be useful, but
14 # WITHOUT ANY WARRANTY; without even the implied warranty of
15 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
16 # GNU General Public License for more details.
18 # You should have received a copy of the GNU General Public License
19 # along with Koha; if not, see <http://www.gnu.org/licenses>.
26 use C4
::Auth
; # checkauth, getborrowernumber.
28 use Digest
::MD5
qw(md5_base64);
32 use Koha
::AuthUtils
qw(hash_password);
35 my $dbh = C4
::Context
->dbh;
37 my ( $template, $borrowernumber, $cookie ) = get_template_and_user
(
39 template_name
=> "opac-passwd.tt",
47 my $borr = C4
::Members
::GetMember
( borrowernumber
=> $borrowernumber );
48 my $minpasslen = C4
::Context
->preference("minPasswordLength");
49 if ( C4
::Context
->preference("OpacPasswordChange") ) {
50 my $sth = $dbh->prepare("UPDATE borrowers SET password = ? WHERE borrowernumber=?");
51 if ( $query->param('Oldkey')
52 && $query->param('Newkey')
53 && $query->param('Confirm') )
55 if ( goodkey
( $dbh, $borrowernumber, $query->param('Oldkey') ) ) {
56 if ( $query->param('Newkey') =~ m
|^\s
+| or $query->param('Newkey') =~ m
|\s
+$| ) {
59 PasswordContainsTrailingSpaces
=> 1,
62 elsif ( $query->param('Newkey') eq $query->param('Confirm')
63 && length( $query->param('Confirm') ) >= $minpasslen )
65 my $clave = hash_password
( $query->param('Newkey') );
66 $sth->execute( $clave, $borrowernumber );
67 $template->param( 'password_updated' => '1' );
68 $template->param( 'borrowernumber' => $borrowernumber );
70 elsif ( $query->param('Newkey') ne $query->param('Confirm') ) {
71 $template->param( 'Ask_data' => '1' );
72 $template->param( 'Error_messages' => '1' );
73 $template->param( 'PassMismatch' => '1' );
75 elsif ( length( $query->param('Confirm') ) < $minpasslen ) {
76 $template->param( 'Ask_data' => '1' );
77 $template->param( 'Error_messages' => '1' );
78 $template->param( 'ShortPass' => '1' );
81 $template->param( 'Error_messages' => '1' );
85 $template->param( 'Ask_data' => '1' );
86 $template->param( 'Error_messages' => '1' );
87 $template->param( 'WrongPass' => '1' );
92 # Called Empty, Ask for data.
93 $template->param( 'Ask_data' => '1' );
94 if (!$query->param('Oldkey') && ($query->param('Newkey') || $query->param('Confirm'))){
95 # Old password is empty but one of the others isnt
96 $template->param( 'Error_messages' => '1' );
97 $template->param( 'WrongPass' => '1' );
99 elsif ($query->param('Oldkey') && (!$query->param('Newkey') || !$query->param('Confirm'))){
100 # Oldpassword is entered but one of the other fields is empty
101 $template->param( 'Error_messages' => '1' );
102 $template->param( 'PassMismatch' => '1' );
106 $template->param(firstname
=> $borr->{'firstname'},
107 surname
=> $borr->{'surname'},
108 minpasslen
=> $minpasslen,
112 output_html_with_http_headers
$query, $cookie, $template->output, undef, { force_no_caching
=> 1 };
115 my ( $dbh, $borrowernumber, $key ) = @_;
118 $dbh->prepare("SELECT password FROM borrowers WHERE borrowernumber=?");
119 $sth->execute($borrowernumber);
122 my ($stored_hash) = $sth->fetchrow;
123 if ( substr($stored_hash,0,2) eq '$2') {
124 $hash = hash_password
($key, $stored_hash);
126 $hash = md5_base64
($key);
128 if ( $hash eq $stored_hash ) { return 1; }