ltb-project#126: Ensuring old password is required only with anonymou…

…s password reset.
Worteks · Aug 8, 2024 · b41bd1e · b41bd1e
1 parent 38a1b8a
commit b41bd1e
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/htdocs/resetpassword.php b/htdocs/resetpassword.php
@@ -26,10 +26,10 @@
     $result = "passwordrequired";
 }
 
-if (isset($_POST["oldpassword"]) and $_POST["oldpassword"]) {
-    $oldpassword = $_POST["oldpassword"];
-} else {
+if ($audit_admin === "anonymous" and !isset($_POST["oldpassword"]) and !$_POST["oldpassword"]) {
     $result = "oldpasswordrequired";
+} else {
+    $oldpassword = $_POST["oldpassword"];
 }
 
 if (isset($_POST["pwdreset"]) and $_POST["pwdreset"]) {