correction form desinscription qui accepte bien le cryptage en js

This commit is contained in:
Christophe 2020-08-13 11:24:56 +02:00
parent 3766b28d25
commit a57c825c4c
3 changed files with 24 additions and 38 deletions

View file

@ -2,7 +2,7 @@
<div id="supprimer_compte_spip" class="inner"> <div id="supprimer_compte_spip" class="inner">
<h1><:comptespip:supprimer_compte_spip:></h1> <h1><:comptespip:supprimer_compte_spip:></h1>
<div class="ajax"> <div class="">
[(#FORMULAIRE_SUPPRIMER_COMPTE_SPIP{#SESSION{id_auteur}})] [(#FORMULAIRE_SUPPRIMER_COMPTE_SPIP{#SESSION{id_auteur}})]
</div> </div>
</div> </div>

View file

@ -1,3 +1,6 @@
#HTTP_HEADER{"Cache-Control: no-store, no-cache, must-revalidate"}
#HTTP_HEADER{"Pragma: no-cache"}
<div class="formulaire_spip formulaire_#FORM"> <div class="formulaire_spip formulaire_#FORM">
[<p class="reponse_formulaire reponse_formulaire_erreur">(#ENV*{message_erreur})</p>] [<p class="reponse_formulaire reponse_formulaire_erreur">(#ENV*{message_erreur})</p>]
@ -14,7 +17,6 @@
[ <span class='erreur_message'>(#ENV**{erreurs}|table_valeur{new_pass})</span> ] [ <span class='erreur_message'>(#ENV**{erreurs}|table_valeur{new_pass})</span> ]
<input type='password' autocomplete="off" class='password' name='password' id='password' value="" required /> <input type='password' autocomplete="off" class='password' name='password' id='password' value="" required />
</div> </div>
<input type="text" value="" name="toto" id="toto"/>
</div> </div>
<p class="boutons"><input type="submit" class="submit" value="<:moncompte:desinscription:>" ></p> <p class="boutons"><input type="submit" class="submit" value="<:moncompte:desinscription:>" ></p>
@ -34,20 +36,9 @@
'compat_md5': false 'compat_md5': false
}; };
function desinscription_submit() {
}
//console.log(login_info);
//var a = jQuery("input[name=password]");
//var b = a.prop("value");
//console.log(calcule_hash_pass(b));
//if ( b && ( login_info.alea_actuel || login_info.alea_futur )) {
//a.after('<input name="password" type="hidden" value="" />').prop("value", b);
//a.prop("name", "nothing").prop("value",""), calcule_hash_pass(b);
//}
jQuery(function(){ jQuery(function(){
jQuery('form#desinscription').submit(function(e){ jQuery('form#desinscription').on('submit', function(e){
e.preventDefault();
var pass = $('#password').val(); var pass = $('#password').val();
if ((login_info.alea_actuel || login_info.alea_futur) if ((login_info.alea_actuel || login_info.alea_futur)
@ -64,12 +55,11 @@ jQuery(function(){
hash = hash+';'+calcMD5(login_info.alea_actuel + pass); hash = hash+';'+calcMD5(login_info.alea_actuel + pass);
hash = hash+';'+calcMD5(login_info.alea_futur + pass); hash = hash+';'+calcMD5(login_info.alea_futur + pass);
} }
if ( hash ) {
jQuery('input#password').prop('value', ''); $('input[name=password]').val(hash);
jQuery('input#toto').prop('value', hash); }
}
}; });
}); });
});
</script> </script>

View file

@ -41,10 +41,6 @@ function formulaires_supprimer_compte_spip_verifier_dist($id_auteur, $redirect =
function formulaires_supprimer_compte_spip_traiter_dist($id_auteur, $redirect = ''){ function formulaires_supprimer_compte_spip_traiter_dist($id_auteur, $redirect = ''){
$chaine = _request('password'); $chaine = _request('password');
$toto = _request('toto');
$chaine = substr($chaine,1, -1);
$password_a_tester = explode(';', $chaine)[0]; $password_a_tester = explode(';', $chaine)[0];
$password = sql_getfetsel('pass', 'spip_auteurs', 'id_auteur='.intval($id_auteur)); $password = sql_getfetsel('pass', 'spip_auteurs', 'id_auteur='.intval($id_auteur));