修改密码旧密码加掩码

application/models/DAO/Member.php

@@ -489,8 +489,9 @@ class MemberModel extends \DAO\AbstractModel
         if (!$data['oldPassword']) {
             \Error\ErrorModel::throwException(\Error\CodeConfigModel::emptyOldPassword);
         }
-        $memberCurrent = $this->getOneByWhereWithField(array('member_id' => $memberId), 'member_passwd');
-        if (!($memberCurrent && $memberCurrent['member_passwd'] == md5($data['oldPassword']))) {
+        $memberCurrent = $this->getOneByWhereWithField(array('member_id' => $memberId), 'member_passwd,member_time');
+        $addKey=Common::getConfig('password.key');
+        if (!($memberCurrent && $memberCurrent['member_passwd'] == md5($memberCurrent['member_time'].$data['oldPassword'].$addKey))) {
             \Error\ErrorModel::throwException(\Error\CodeConfigModel::worngOldPassword);
         }
         $this->checkPassword($data);