n'envoie plus le hash du mot de passe directement quand on change de mot de passe
[platal.git] / htdocs / javascript / motdepasse.js
1 /***************************************************************************
2 * Copyright (C) 2003-2006 Polytechnique.org *
3 * http://opensource.polytechnique.org/ *
4 * *
5 * This program is free software; you can redistribute it and/or modify *
6 * it under the terms of the GNU General Public License as published by *
7 * the Free Software Foundation; either version 2 of the License, or *
8 * (at your option) any later version. *
9 * *
10 * This program is distributed in the hope that it will be useful, *
11 * but WITHOUT ANY WARRANTY; without even the implied warranty of *
12 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
13 * GNU General Public License for more details. *
14 * *
15 * You should have received a copy of the GNU General Public License *
16 * along with this program; if not, write to the Free Software *
17 * Foundation, Inc., *
18 * 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA *
19 ***************************************************************************/
20
21 document.write('<script language="javascript" src="javascript/secure_hash.js"></script>');
22
23 function EnCryptedResponse() {
24 pw1 = document.forms.changepass.nouveau.value;
25 pw2 = document.forms.changepass.nouveau2.value;
26 if (pw1 != pw2) {
27 alert ("\nErreur : les deux champs ne sont pas identiques !")
28 return false;
29 exit;
30 }
31 if (pw1.length < 6) {
32 alert ("\nErreur : le nouveau mot de passe doit faire au moins 6 caractères !")
33 return false;
34 exit;
35 }
36
37 old_pass = hash_encrypt(document.forms.changepass.ancien.value);
38
39 str = old_pass + ":" +
40 document.forms.changepass.challenge.value;
41 document.forms.changepass2.response.value = hash_encrypt(str);
42
43 str = hash_xor(hash_encrypt(document.forms.changepass.nouveau.value), old_pass);
44 document.forms.changepass2.response2.value = str;
45
46 alert ("Le mot de passe que tu as rentré va être chiffré avant de nous parvenir par Internet ! Ainsi il ne circulera pas en clair.");
47 document.forms.changepass2.submit();
48 return true;
49 }