Re: [Phpgroupware-developers] preferences/changepassword.php

[Izzy Blacklock]

On Thursday 10 Apr 2003 7:10 am, Chris Weiss wrote:
> >First off, what is the GLOBALS[phpgw_info] array?  Is this read from the
> >database? How is the $GLOBALS['phpgw_info']['user']['passwd'] value being
> >used?  Is it really needed?
>
> The info array hold several general config and global prefs items as well
> as some general objects and it kept in the session. 
> $GLOBALS['phpgw_info']['user'] ['passwd'] holds the password the user
> logged in with, it's commonly used to login to an email server and any
> other external system that requires the password in plain text.
>
> >Second, in the beginning of the else, should
> >$GLOBALS['phpgw_info']['user']['passwd'] = really need to call
> >change_password again or can it just take the value returned in
> >$passwd_changed.
>
> I thought this too when i first looked.

Thanks Chris, this clarifies things.  So there is a need for 
$GLOBALS['phpgw_info']['user']['passwd'] to store the users password.  I 
suspect the second call isn't needed and should be replaced with the value 
from the first.  I'll submit a patch to this effect and correct my first 
patch to return the encrypted password not true.

...Izzy