cst1/kpsul
1
0
Fork 0
forked from DGNum/gestioCOF
Code Pull requests Activity

Passage de sha1 à sha256 pour le pwd sur Account

Browse source
This commit is contained in:
Aurélien Delobelle 2016-09-03 02:54:02 +02:00
parent 7bfd2e2f9a
commit d12dfe2f56
2 changed files with 4 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
kfet/backends.py
View file

@ -18,8 +18,8 @@ class KFetBackend(object):
return None
try:
password_sha1 = hashlib.sha1(password.encode()).hexdigest()
account = Account.objects.get(password=password_sha1)
password_sha256 = hashlib.sha256(password.encode()).hexdigest()
account = Account.objects.get(password=password_sha256)
user = account.cofprofile.user
except Account.DoesNotExist:
return None

4
kfet/views.py
View file

@ -319,9 +319,9 @@ def account_update(request, trigramme):
if (request.user.has_perm('kfet.change_account_password')
and pwd_form.is_valid()):
pwd = pwd_form.cleaned_data['pwd1']
pwd_sha1 = hashlib.sha1(pwd.encode()).hexdigest()
pwd_sha256 = hashlib.sha256(pwd.encode()).hexdigest()
Account.objects.filter(pk=account.pk).update(
password = pwd_sha1)
password = pwd_sha256)
messages.success(request, 'Mot de passe mis à jour')
# Checking perm to manage perms