stephan/ms1inscription-v5
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Refactor account management functionality to enhance password reset process. Exclude 'compte_reset' from session checks in compte.php to prevent conflicts with active sessions. Implement safe return link handling after logout in inc_fx_compte.php, ensuring users can navigate back to the reset page securely. Add user notifications for active sessions during password reset attempts, aligning with MSIN-4401 requirements for improved user experience.

Browse Source
This commit is contained in:
stephan
2026-07-13 11:19:13 -04:00
parent 4816bcf024
commit 7d08e7ec7c
2 changed files with 83 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
compte.php
View File

@ -107,7 +107,8 @@ if ($strCode != 'compte_login' && $strCode != 'compte_motdepasse' && $strCode !=
}
// Déjà connecté sur login / mot de passe / inscription : accueil compte, sans polluer redirect_after_login.
if (($strCode == 'compte_login' || $strCode == 'compte_motdepasse' || $strCode == 'compte_nouveau' || $strCode == 'compte_reset') && isset($_SESSION['com_id'])) {
// MSIN-4401 — compte_reset exclu : géré dans fxShowFormReset (conflit autre session).
if (($strCode == 'compte_login' || $strCode == 'compte_motdepasse' || $strCode == 'compte_nouveau') && isset($_SESSION['com_id'])) {
header('Location: ' . $vDomaine . '/' . $strPage);
exit;
}