Don't add hashed password to the old password list if it's already in there https://github.com/virtualmin/virtualmin-pro/issues/35

This commit is contained in:
Jamie Cameron
2023-03-29 17:27:01 -07:00
parent 0b8611b4fd
commit 764533a6e5

View File

@ -774,14 +774,16 @@ if ($oldpass ne $user->{'pass'} &&
my $nolock = $oldpass;
$nolock =~ s/^\!//;
$user->{'olds'} ||= [];
unshift(@{$user->{'olds'}}, $nolock);
if ($miniserv->{'pass_oldblock'}) {
while(scalar(@{$user->{'olds'}}) >
$miniserv->{'pass_oldblock'}) {
pop(@{$user->{'olds'}});
if (&indexof($nolock, @{$user->{'olds'}}) < 0) {
unshift(@{$user->{'olds'}}, $nolock);
if ($miniserv->{'pass_oldblock'}) {
while(scalar(@{$user->{'olds'}}) >
$miniserv->{'pass_oldblock'}) {
pop(@{$user->{'olds'}});
}
}
$user->{'lastchange'} = time();
}
$user->{'lastchange'} = time();
}
}