add caution for unchanged default admin password

codepolitanlab · Nov 26, 2014 · 80949e8 · 80949e8
1 parent 63c55a3
commit 80949e8
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 3 deletions.
diff --git a/sites/default/users/admin.json b/sites/default/users/admin.json
@@ -1,5 +1,5 @@
 {
-	"username": "admin",
-	"password": "password",
-	"passconf": "password"
+    "username": "admin",
+    "password": "password",
+    "passconf": "password"
 }
diff --git a/system/application/core/Admin_Controller.php b/system/application/core/Admin_Controller.php
@@ -8,6 +8,12 @@ public function __construct()
 
 		// set theme
 		$this->template->set_theme($this->config->item('admin_theme'));
+
+		if(file_exists('sites/'.SITE_SLUG.'/users/admin.json')){
+			$admin = json_decode(file_get_contents('sites/'.SITE_SLUG.'/users/admin.json'), true);
+			if(isset($admin['password']) && $admin['password'] == 'password')
+				$this->template->set('warning', 'Change your default admin password to secure one in <a href="'.site_url('panel/users/edit/admin').'"><strong>Users settings</strong></a> page first.');
+		}
 	}
 
 }