password change

[Frank Vèssia]

I'm creating a password change form with 3 fields, old_pass, new_pass and confirm_pass. What i need is the code for crypting a pass for comparing the old_pass with the pass stored in db.

[Soma]

Have you tried $user->pass for getting the current passwort and compare? $user->pass returns encrypted password.

[Frank Vèssia]

I know $user->pass returns encrypted pass for this reason i need the code to create an encrypted pass for comparing...i don't think it's a simple md5 encryption

[Soma]

sorry I confused something... I meant decrypted, but that's false anyway.

have a look at FieldtypePassword.module ...

[Soma]

just checked:

you should be able to compare $user->pass->matches('string'); returns true if it matches.

[Frank Vèssia]

thanks i will try 

[ryan]

Soma's suggestion is correct–thanks Soma! Another way to do the same thing:

if($session->authenticate($user, $old_pass)) {
    $user->pass = $new_pass; 
}