Issue 1360 encoding the answer to find account

git-svn-id: http://xe-core.googlecode.com/svn/branches/1.5.0@10201 201d5d3c-b55e-5fd7-737f-ddc643e51545
This commit is contained in:
ngleader 2012-02-27 02:57:33 +00:00
parent 88f7a46fc5
commit 1f8eb5f635
2 changed files with 30 additions and 1 deletions

View file

@ -1109,7 +1109,19 @@
// Display a message if no answer is entered
if (!$member_info->find_account_question || !$member_info->find_account_answer) return new Object(-1, 'msg_question_not_exists');
if(trim($member_info->find_account_question) != $find_account_question || trim($member_info->find_account_answer) != $find_account_answer) return new Object(-1, 'msg_answer_not_matches');
$member_info->find_account_answer = trim($member_info->find_account_answer);
if(trim($member_info->find_account_question) != $find_account_question || $member_info->find_account_answer != $find_account_answer || $member_info->find_account_answer != md5($find_account_answer))
{
return new Object(-1, 'msg_answer_not_matches');
}
// change to md5
if($member_info->find_account_answer == $find_account_answer)
{
$args->member_srl = $member_srl;
$args->find_account_answer = md5($member_info->find_account_answer);
executeQuery('member.updateMemberFindQuesionAnswer', $args);
}
if ($config->identifier == 'email_address'){
$user_id = $email_address;
@ -1696,6 +1708,11 @@
if (!$args->user_id) $args->user_id = 't'.$args->member_srl;
if (!$args->user_name) $args->user_name = $args->member_srl;
if(trim($args->find_account_answer))
{
$args->find_account_answer = md5($args->find_account_answer);
}
$output = executeQuery('member.insertMember', $args);
if(!$output->toBool()) {
$oDB->rollback();

View file

@ -0,0 +1,12 @@
<query id="updateMemberFindQuesionAnswer" action="update">
<tables>
<table name="member" />
</tables>
<columns>
<column name="find_account_question" var="find_account_question" />
<column name="find_account_answer" var="find_account_answer" />
</columns>
<conditions>
<condition operation="equal" column="member_srl" var="member_srl" notnull="notnull" filter="number" />
</conditions>
</query>