loncom/interface/resetpw.pm - diff

Return to resetpw.pm CVS log

Up to [LON-CAPA] / loncom / interface

-version 1.20, 2009/10/08 19:54:37
+version 1.22, 2009/10/09 00:26:40
  Line 26
  # http://www.lon-capa.org/
  #
  #
+ =pod
+ =head1 NAME
+ Apache::resetpw: reset user password.
+ =head1 SYNOPSIS
+ Handles resetting of forgotten passwords.
+ This is part of the LearningOnline Network with CAPA project
+ described at http://www.lon-capa.org.
+ =head1 OVERVIEW
+ A user with an e-mail address associated with his/her LON-CAPA username
+ can reset a forgotten password, using a link sent to the e-mail address
+ if the authentication type for the account is "internal".
+ =cut
  package Apache::resetpw;
  use strict;
- Line 254  sub reset_passwd {
+ Line 276  sub reset_passwd {
          my $reqtime = &Apache::lonlocal::locallocaltime($data{'time'});
          if ($now - $data{'time'} < 7200) {
              if ($env{'form.action'} eq 'verify_and_change_pass') {
+                 unless (($env{'form.uname'} eq $data{'username'}) && ($env{'form.udom'} eq $data{'domain'}) && ($env{'form.email'} eq $data{'email'})) {
+                     $msg = &generic_failure_msg($contact_name,$contact_email);
+                     return $msg;
+                 }
                  my $change_failed =
  		    &Apache::lonpreferences::verify_and_change_password($r,'reset_by_email',$token);
                  if (!$change_failed) {