unset plaintext pw and hash on user save

2026-05-06 04:17:09 +02:00 · 2015-08-18 19:07:34 -06:00
parent dbccdbd51f
commit 6466241cbb
1 changed files with 6 additions and 0 deletions
--- a/system/src/Grav/Common/User/User.php
+++ b/system/src/Grav/Common/User/User.php
@@ -98,6 +98,12 @@ class User extends Data
    {
        $file = $this->file();
        if ($file) {
+            // if plain text password, hash it and remove plain text
+            if ($this->password) {
+                $this->hashed_password = Authentication::create($this->password);
+                unset($this->password);
+            }
+
            $username = $this->get('username');
            unset($this->username);
            $file->save($this->items);