Allow re-authentication with OpenID
"Rememberme" logins aren't allowed to make changes to an account (since cookie-stealing is too easy). Users have to re-authenticate. Previously, it was impossible to do so without having a username and password; this change lets you do it with OpenID, too.
This commit is contained in:
@@ -630,4 +630,15 @@ class User extends Memcached_DataObject
|
||||
|
||||
return $profile;
|
||||
}
|
||||
|
||||
function hasOpenID()
|
||||
{
|
||||
$oid = new User_openid();
|
||||
|
||||
$oid->user_id = $this->id;
|
||||
|
||||
$cnt = $oid->find();
|
||||
|
||||
return ($cnt > 0);
|
||||
}
|
||||
}
|
||||
|
Reference in New Issue
Block a user