[Web] hide auth settings for external users

2023-05-25 10:06:55 +02:00
parent 2a02bae53e
commit 6dc6c649ce
4 changed files with 10 additions and 8 deletions
--- a/data/web/inc/functions.mailbox.inc.php
+++ b/data/web/inc/functions.mailbox.inc.php
@@ -3116,7 +3116,7 @@ function mailbox($_action, $_type, $_data = null, $_extra = null) {
              $stmt = $pdo->prepare("UPDATE `mailbox` SET
                  `password` = :password_hashed,
                  `attributes` = JSON_SET(`attributes`, '$.passwd_update', NOW())
-                    WHERE `username` = :username");
+                    WHERE `username` = :username AND authsource = 'mailcow'");
              $stmt->execute(array(
                ':password_hashed' => $password_hashed,
                ':username' => $username