ntopng/scripts/lua/admin/password_reset.lua
Emanuele Faranda afdfac1c9c Lua scripts parameters validation (#970)
* partial work

* Migrate 'mode' parameters

* Migrate alerts types

* Fix some interface ids

* Partial work

* Partial work

* End of work for _GET parameters

* Work in progress

* Add support for special parameters

* Preferences validation

* Fixes and improvements

* Enforce interger validation
2017-02-08 12:25:35 +01:00

38 lines
1.2 KiB
Lua

--
-- (C) 2013 - ntop.org
--
dirs = ntop.getDirs()
package.path = dirs.installdir .. "/scripts/lua/modules/?.lua;" .. package.path
require "lua_utils"
sendHTTPHeader('text/html; charset=iso-8859-1')
username = _POST["username"]
old_password = _POST["old_password"]
new_password = _POST["new_password"]
confirm_new_password = _POST["confirm_password"]
user_group = ntop.getUserGroup()
if(user_group == "administrator") then
old_password = ""
else
-- Check to avoid that this user changes password for other users
username = _COOKIE["user"]
end
if((username == nil) or (old_password == nil) or (new_password == nil) or (confirm_new_password == nil)) then
print ("{ \"result\" : -1, \"message\" : \"Invalid parameters\" }")
return
end
if(new_password ~= confirm_new_password) then
print ("{ \"result\" : -1, \"message\" : \"Password don't match\" }")
return
end
if(ntop.resetUserPassword(_SESSION["user"], username, old_password, new_password)) then
print ("{ \"result\" : 0, \"message\" : \"Password changed successfully\" }")
else
print ("{ \"result\" : -1, \"message\" : \"Unable to set the new user password: perhaps the old password was invalid ?\" }")
end