Travaux sur la validité des mails et des mots de passes
This commit is contained in:
@@ -6,7 +6,7 @@ import sqlite3
|
||||
import os
|
||||
from socket import gethostname
|
||||
from flask_bcrypt import Bcrypt
|
||||
from tools.utils import email_disp, append_to_log, gen_token
|
||||
from tools.utils import email_disp, append_to_log, gen_token, valid_passwd
|
||||
|
||||
profil = Blueprint('profil', __name__, template_folder='templates')
|
||||
|
||||
@@ -122,15 +122,19 @@ def change_passwd() :
|
||||
mailbox['alias'] = tmp[1]
|
||||
mailbox['xmpp'] = tmp[2]
|
||||
|
||||
|
||||
if request.method == 'POST' :
|
||||
|
||||
if request.form['password'] == request.form['passwd_confirm']:
|
||||
password = request.form['password']
|
||||
password_confirm = request.form['passwd_confirm']
|
||||
|
||||
if password == password_confirm and valid_passwd(password):
|
||||
mail_passwd_change = 0
|
||||
xmmp_passwd_change = 0
|
||||
passwd = request.form['password']
|
||||
mail_passwd_change = 0
|
||||
|
||||
if MAIL_SERVER:
|
||||
cmd = SETUID+ " set_mail_passwd " + "'"+mailbox['Mail']+"' "+"'"+passwd+"'"
|
||||
cmd = SETUID+ ' set_mail_passwd ' + '"'+mailbox['Mail']+'" '+ '"'+passwd+'"'
|
||||
mail_passwd_change = os.system(cmd)
|
||||
|
||||
|
||||
@@ -153,9 +157,11 @@ def change_passwd() :
|
||||
log=TIME + ' - ' + IP + ' - ' + UTILISATEUR + ' - ' + CLIENT_PLATFORM + '\n' + '---> ' + "Changement du mot de passe" + '\n'
|
||||
append_to_log(log, UTILISATEUR)
|
||||
flash(u'Votre mot de passe a été changé', 'succes')
|
||||
else:
|
||||
flash(u'Il y eu un problème votre mot de passe n\'a pas été changé', 'error')
|
||||
can_commit=False
|
||||
else:
|
||||
if not( valid_passwd(password) ):
|
||||
flash(u'Le mot de passe ne peut pas contenir les caractères " et &', 'error')
|
||||
else:
|
||||
flash(u'Les mot de passes ne sont pas identique :/ ', 'error')
|
||||
|
||||
conn.close()
|
||||
return render_template('mailbox.html',
|
||||
@@ -247,7 +253,7 @@ def remove_alias(aliasrm):
|
||||
aliases = aliases + "," + alias
|
||||
else:
|
||||
aliases = alias
|
||||
cmd = SETUID+ " set_mail_alias " + "'"+mail+"'"+" del "+"'"+alias+"'"
|
||||
cmd = SETUID + " set_mail_alias " + "'"+mail+"'"+" del "+"'"+alias+"'"
|
||||
res = os.system(cmd)
|
||||
if res == 0:
|
||||
cursor.execute("UPDATE users SET alias=? WHERE name=?",
|
||||
|
||||
Reference in New Issue
Block a user