Browse Source

[Web] Hide self-edit passwords of domain admins, fixes #2135

andryyy 6 years ago
parent
commit
c1eed1d406
1 changed files with 3 additions and 0 deletions
  1. 3 0
      data/web/inc/functions.domain_admin.inc.php

+ 3 - 0
data/web/inc/functions.domain_admin.inc.php

@@ -5,6 +5,9 @@ function domain_admin($_action, $_data = null) {
   $_data_log = $_data;
   $_data_log = $_data;
   !isset($_data_log['password']) ?: $_data_log['password'] = '*';
   !isset($_data_log['password']) ?: $_data_log['password'] = '*';
   !isset($_data_log['password2']) ?: $_data_log['password2'] = '*';
   !isset($_data_log['password2']) ?: $_data_log['password2'] = '*';
+  !isset($_data_log['user_old_pass']) ?: $_data_log['user_old_pass'] = '*';
+  !isset($_data_log['user_new_pass']) ?: $_data_log['user_new_pass'] = '*';
+  !isset($_data_log['user_new_pass2']) ?: $_data_log['user_new_pass2'] = '*';
   switch ($_action) {
   switch ($_action) {
     case 'add':
     case 'add':
       $username		= strtolower(trim($_data['username']));
       $username		= strtolower(trim($_data['username']));