L-electron-Rare/moodle
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

MDL-19608 do not force changing of passwords if users may not actually change them

Browse Source
This commit is contained in:
Petr Skoda
2009-11-17 11:36:51 +00:00
parent cce60fc481
commit 154acd7aa3
1 changed files with 17 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
admin/user/user_bulk_forcepasswordchange.php
+17 -2
View File
@@ -22,14 +22,29 @@ if (empty($SESSION->bulk_users)) {
admin_externalpage_print_header();
if ($confirm and confirm_sesskey()) {
$primaryadmin = get_admin();
// only force password change if user may actually change the password
$authsavailable = get_plugin_list('auth');
$changeable = array();
foreach($authsavailable as $authname=>$path) {
if (!$auth = get_auth_plugin($authname)) {
continue;
}
if (@$auth->can_change_password()) { // plugins may not be configured yet, not nice :-(
$changeable[$authname] = true;
}
}
$parts = array_chunk($SESSION->bulk_users, 300);
foreach ($parts as $users) {
list($in, $params) = $DB->get_in_or_equal($users);
if ($rs = $DB->get_recordset_select('user', "id $in", $params)) {
foreach ($rs as $user) {
set_user_preference('auth_forcepasswordchange', 1, $user->id);
if (!empty($changeable[$user->auth])) {
set_user_preference('auth_forcepasswordchange', 1, $user->id);
unset($SESSION->bulk_users[$user->id]);
} else {
echo $OUTPUT->notification(get_string('forcepasswordchangenot', '', fullname($user, true)));
}
}
$rs->close();
}