From: Florent Bruneau <florent.bruneau@polytechnique.org>
Date: Tue, 27 May 2008 21:55:03 +0000 (+0200)
Subject: Bypass password check.
X-Git-Url: http://git.polytechnique.org/?p=dotclear.git;a=commitdiff_plain;h=0ff09dcb44d702fc44e0a7c89a832cc1636c61d4

Bypass password check.

Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
---

diff --git a/class.xorg.auth.php b/class.xorg.auth.php
index c1e9b82..989e14d 100644
--- a/class.xorg.auth.php
+++ b/class.xorg.auth.php
@@ -125,6 +125,11 @@ class xorgAuth extends dcAuth {
     return parent::check($permissions, $blog_id);
   }
 
+  public function checkPassword($pwd) {
+    $this->buildFromSession();
+    return !empty($this->user_id);
+  }
+
   public function allowPassChange() {
     return false;
   }
diff --git a/page.auth.admin.php b/page.auth.admin.php
index 31f0901..98f7e84 100644
--- a/page.auth.admin.php
+++ b/page.auth.admin.php
@@ -74,12 +74,7 @@ class xorgLoginPage extends dcUrlHandlers {
       '<p><a href="' . $core->blog->url . 'auth/Xorg?path=/~x2003bruneau/dotclear/admin/index.php">Via Polytechnique.org</a></p>' .
       '<p><a href="' . $core->blog->url . 'admin/auth.php">Via le formulaire</a></p>' .
       '</fieldset>'.
-      
       '<p>'.__('You must accept cookies in order to use the private area.').'</p>';
-      
-      if ($core->auth->allowPassChange()) {
-        echo '<p><a href="auth.php?recover=1">'.__('I forgot my password').'</a></p>';
-      }
     }
     ?>
     </form>