Question

我设法为登录用户保存新密码或更改密码。

    public function saveNewPassword() {
    $rules = array(
        'old_password'            => 'required',
        'password'       => 'required|confirmed|different:old_password',
        'password_confirmation' => 'required|different:old_password|same:password_confirmation'
    );
    $user = User::findOrFail(Auth::user()->id);
    // Validate the inputs
    $validator = Validator::make(Input::all(), $rules);


    if ($validator->fails()) {
        return Redirect::back()
            ->withErrors($validator)
            ->withInput();
    } else {
        $password = Input::get( 'password' );
        $passwordConfirmation = Input::get( 'password_confirmation' );

        if(!empty($password)) {
            if($password === $passwordConfirmation) {
                $user->password = $password;
                $user->password_confirmation = $passwordConfirmation;
            } 
        } else {
            unset($user->password);
            unset($user->password_confirmation);
        }

        // Save if valid. Password field will be hashed before save
        $user->save();
    }

    // Get validation errors (see Ardent package)
    $error = $user->errors()->all();

    if(empty($error)) {
        Session::flash('message', 'Successfully saved!');
        return Redirect::back();

    } else {
        Session::flash('error', $error);
        return Redirect::back();
    }
}

我遇到的问题是，如何检查旧密码，即等于当前密码？有任何想法吗？ Confide有自己的方法来更改密码吗？

Answer 1

我使用此sollution来更改密码。在您的规则中，您有一个错误：password_confirmation应该与password而不是password_confirmation相同。

以下是完整且经过测试的功能：

public function changePassword($id){
    $rules = array(
        'old_password'                  => 'required',
        'new_password'                  => 'required|confirmed|different:old_password',
        'new_password_confirmation'     => 'required|different:old_password|same:new_password'
    );

    $user = User::find(Auth::user()->id);
    $validator = Validator::make(Input::all(), $rules);

    //Is the input valid? new_password confirmed and meets requirements
    if ($validator->fails()) {
        Session::flash('validationErrors', $validator->messages());
        return Redirect::back()->withInput();
    }

    //Is the old password correct?
    if(!Hash::check(Input::get('old_password'), $user->password)){
        return Redirect::back()->withInput()->withError('Password is not correct.');
    }

    //Set new password to user
    $user->password = Input::get('new_password');
    $user->password_confirmation = Input::get('new_password_confirmation');

    $user->touch();
    $save = $user->save();

    return Redirect::to('logout')->withMessage('Password has been changed.');

}

如果您不使用Confide，这也有效。

Answer 2

来自信心的github：

与Laravel Auth和Reminders组件/配置集成。

所以我猜想使用Auth::validate()方法可以解决问题。

Laravel - Confide - 保存更改密码

2 个答案: