X-Git-Url: https://git.cyclocoop.org/%242?a=blobdiff_plain;f=includes%2Fpassword%2FPasswordPolicyChecks.php;h=502f1e024cff5a4cf0ac5638662429653a33c540;hb=04f94a57ad6076684f186bb7242751607c842283;hp=d7aee5bd5c8c8f36f7831598de89449e79bcef86;hpb=b3b2214a718e737d4921536c33922295d451341f;p=lhc%2Fweb%2Fwiklou.git diff --git a/includes/password/PasswordPolicyChecks.php b/includes/password/PasswordPolicyChecks.php index d7aee5bd5c..502f1e024c 100644 --- a/includes/password/PasswordPolicyChecks.php +++ b/includes/password/PasswordPolicyChecks.php @@ -20,7 +20,7 @@ * @file */ -use \Cdb\Reader as CdbReader; +use Cdb\Reader as CdbReader; /** * Functions to check passwords against a policy requirement @@ -105,11 +105,15 @@ class PasswordPolicyChecks { $status = Status::newGood(); $username = $user->getName(); - if ( $policyVal - && isset( $blockedLogins[$username] ) - && $password == $blockedLogins[$username] - ) { - $status->error( 'password-login-forbidden' ); + if ( $policyVal ) { + if ( isset( $blockedLogins[$username] ) && $password == $blockedLogins[$username] ) { + $status->error( 'password-login-forbidden' ); + } + + // Example from ApiChangeAuthenticationRequest + if ( $password === 'ExamplePassword' ) { + $status->error( 'password-login-forbidden' ); + } } return $status; }