correction form desinscription qui accepte bien le cryptage en js

This commit is contained in:
Christophe 2020-08-13 11:24:56 +02:00
parent 3766b28d25
commit a57c825c4c
3 changed files with 24 additions and 38 deletions

View file

@ -2,7 +2,7 @@
<div id="supprimer_compte_spip" class="inner">
<h1><:comptespip:supprimer_compte_spip:></h1>
<div class="ajax">
<div class="">
[(#FORMULAIRE_SUPPRIMER_COMPTE_SPIP{#SESSION{id_auteur}})]
</div>
</div>

View file

@ -1,3 +1,6 @@
#HTTP_HEADER{"Cache-Control: no-store, no-cache, must-revalidate"}
#HTTP_HEADER{"Pragma: no-cache"}
<div class="formulaire_spip formulaire_#FORM">
[<p class="reponse_formulaire reponse_formulaire_erreur">(#ENV*{message_erreur})</p>]
@ -14,7 +17,6 @@
[ <span class='erreur_message'>(#ENV**{erreurs}|table_valeur{new_pass})</span> ]
<input type='password' autocomplete="off" class='password' name='password' id='password' value="" required />
</div>
<input type="text" value="" name="toto" id="toto"/>
</div>
<p class="boutons"><input type="submit" class="submit" value="<:moncompte:desinscription:>" ></p>
@ -34,20 +36,9 @@
'compat_md5': false
};
function desinscription_submit() {
}
//console.log(login_info);
//var a = jQuery("input[name=password]");
//var b = a.prop("value");
//console.log(calcule_hash_pass(b));
//if ( b && ( login_info.alea_actuel || login_info.alea_futur )) {
//a.after('<input name="password" type="hidden" value="" />').prop("value", b);
//a.prop("name", "nothing").prop("value",""), calcule_hash_pass(b);
//}
jQuery(function(){
jQuery('form#desinscription').submit(function(e){
e.preventDefault();
jQuery(function(){
jQuery('form#desinscription').on('submit', function(e){
var pass = $('#password').val();
if ((login_info.alea_actuel || login_info.alea_futur)
@ -64,12 +55,11 @@ jQuery(function(){
hash = hash+';'+calcMD5(login_info.alea_actuel + pass);
hash = hash+';'+calcMD5(login_info.alea_futur + pass);
}
jQuery('input#password').prop('value', '');
jQuery('input#toto').prop('value', hash);
};
if ( hash ) {
$('input[name=password]').val(hash);
}
}
});
});
});
</script>

View file

@ -41,10 +41,6 @@ function formulaires_supprimer_compte_spip_verifier_dist($id_auteur, $redirect =
function formulaires_supprimer_compte_spip_traiter_dist($id_auteur, $redirect = ''){
$chaine = _request('password');
$toto = _request('toto');
$chaine = substr($chaine,1, -1);
$password_a_tester = explode(';', $chaine)[0];
$password = sql_getfetsel('pass', 'spip_auteurs', 'id_auteur='.intval($id_auteur));