Django - User Password Change by coding

Question

I am trying to give permission to change password for logged in user. coded as below.. result comes as password has been changed but password not set.

Note: template having three text box

"old" for current password
"password" for new password
"confirm" for confirmation of new password.

def changepassword(request):
    if request.method == 'POST':
        user = authenticate(request, username=request.user,password=request.POST['old'])
        if user is None:
            return render(request, 'pmp/changepassword.html', {'error': 'Current Password Enter Mismatch! '})
        else:
            try:
                if request.POST['password'] == request.POST['confirm']:
                    u = request.user
                    u.set_password('password')
                    return render(request, 'pmp/changepassword.html', {'success':'Password has been changed!'})
                else:
                    return render(request, 'pmp/changepassword.html',{'form': AuthenticationForm(), 'error': 'New Password and confirm Password mismatch!'})    
            except ValueError:
                return render(request, 'pmp/changepassword.html',{'form': AuthenticationForm(), 'error': 'Password not changed!'})
            
    return render(request, 'pmp/changepassword.html')

Iain Shelvington · Accepted Answer · 2022-07-19 01:25:36Z

3

You need to call save() on the user after setting the password, set_password() does not save the new password to the DB

    u = request.user
    u.set_password(request.POST['password'])
    u.save() # Add this line

answered Jul 19, 2022 at 1:25

Iain Shelvington

32.5k3 gold badges36 silver badges55 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

Saravanan Ragavan Over a year ago

Thanks! its working now.. I have doubt. if user is trying to set weak password, will it accept it while change password?

Iain Shelvington Over a year ago

set_password will not check the strength of the password - there is a built-in function you can call to check the passwords strength docs.djangoproject.com/en/4.0/topics/auth/passwords/…

Collectives™ on Stack Overflow

Django - User Password Change by coding

1 Answer 1

2 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

2 Comments

Your Answer

Sign up or log in

Post as a guest

Related