Changeset 582

Timestamp:

Nov 20, 2014 4:05:51 PM (10 years ago)

Author:

namnd

Message:

 

File:

• pro-violet-viettel/sourcecode/application/modules/frontend/models/user_model.php (modified) (4 diffs)

pro-violet-viettel/sourcecode/application/modules/frontend/models/user_model.php

@@ -200 +200 @@
                 
                 if ($result) {
+                        
                         $us_id = $result ['us_id'];
                         $token = md5 ( $us_id . self::TOKENPW );
+                        $isCorrectPassword = $this->checkPassword($src, $us_id, $token, $password);
+                        if(!$isCorrectPassword) return '0|Mat khau cua qui vi khong dung';
+
                         $data = $this->vservices->actionExecute ( 'update', array (
                                         'src' => $src,
@@ -211 +215 @@
                                         'phone' => $sentNumber 
                         ), 'user' );
+
                         if(!($data) || is_null($data))
                         {
@@ -234 +239 @@
                                 case 5 :
                                         $sms = "Tai khoan ".$username." chua dang ky tai khoan tren he thong SBG Online soanbaigiang.smas.vn";
-                                        $status = 0;
-                                        break;
-                                case 6 :
-                                        $sms = "Mat khau cua qui vi khong dung";
                                         $status = 0;
                                         break;
@@ -513 +514 @@
                 return $result['total'];
         }
+        
+        public function checkPassword($src, $us_id, $token, $password)
+        {
+                $data = $this->vservices->actionExecute ( 'getinfo', array (
+                                'src' => $src,
+                                'us_id' => $us_id,
+                                'token' => $token,
+                                'ponly'=>1
+                ), 'user' );
+                
+                parse_str($data);
+                if(md5($password) == $pencrypted) return true; else return false;
+        }
 }