Add password reset request expiration

- Change password reset link to /lostpass/[pwdreset]
This commit is contained in:
Hypolite Petovan 2018-01-20 18:15:55 -05:00
parent 391c591322
commit 0888f51b4b
2 changed files with 95 additions and 60 deletions

View file

@ -194,7 +194,12 @@ class User
*/
private static function updatePasswordHashed($uid, $pasword_hashed)
{
return dba::update('user', ['password' => $pasword_hashed, 'pwdreset' => ''], ['uid' => $uid]);
$fields = [
'password' => $pasword_hashed,
'pwdreset' => null,
'pwdreset_time' => null
];
return dba::update('user', $fields, ['uid' => $uid]);
}
/**