I am modifying my linksql 2.1.2 installation to allow users to change their profile such as password and other customized fields in the Users table. I have added a subroutine to the longin.pm file and when it is called, it displays a modify form with the user's current info populated in the form. I have got it working except for the password filed. When I have modified the password (from '1234' to '123456') and clicked submit, I got this error:
GT::SQL::Driver::MYSQL::sth (3472): Executing query: SELECT Username FROM lsUsers
WHERE Password = 123456 AND Username = 'user1'
from Links::Authenticate::auth_valid_user at
e:/www/cgi-bin/linksql/admin/Links/Authenticate.pm line 70
It seems that the program check my existing username and password before I am trying to modify the password in the table. For example, if my old password is '1234', I changed the password to '123456' in the modify form, it will use the new password '123456' to query the user table to see if the username and password match or not.
I even added a function to the Authenticate.pm file and called that from login.pm before I update the password in the table. I didn't work either.
Please advise me how to get around the authentication process and have password changed.
thank you.
Code:
GT::SQL::Driver::MYSQL::sth (3472): Executing query: SELECT Username FROM lsUsers
WHERE Password = 123456 AND Username = 'user1'
from Links::Authenticate::auth_valid_user at
e:/www/cgi-bin/linksql/admin/Links/Authenticate.pm line 70
It seems that the program check my existing username and password before I am trying to modify the password in the table. For example, if my old password is '1234', I changed the password to '123456' in the modify form, it will use the new password '123456' to query the user table to see if the username and password match or not.
I even added a function to the Authenticate.pm file and called that from login.pm before I update the password in the table. I didn't work either.
Please advise me how to get around the authentication process and have password changed.
thank you.
allowing users to change password