1a603a10ed
Replace all uses of `forceFill`, `forceCreate`, and `forceFill` with their non-force equivalents across models, actions, controllers, and Livewire components. Add explicit `$fillable` arrays to all affected Eloquent models to enforce mass assignment protection. Add ModelFillableCreationTest and ModelFillableRegressionTest to verify that model creation respects fillable constraints and prevent regressions.
29 lines
757 B
PHP
29 lines
757 B
PHP
<?php
|
|
|
|
namespace App\Actions\Fortify;
|
|
|
|
use App\Models\User;
|
|
use Illuminate\Support\Facades\Hash;
|
|
use Illuminate\Support\Facades\Validator;
|
|
use Illuminate\Validation\Rules\Password;
|
|
use Laravel\Fortify\Contracts\ResetsUserPasswords;
|
|
|
|
class ResetUserPassword implements ResetsUserPasswords
|
|
{
|
|
/**
|
|
* Validate and reset the user's forgotten password.
|
|
*
|
|
* @param array<string, string> $input
|
|
*/
|
|
public function reset(User $user, array $input): void
|
|
{
|
|
Validator::make($input, [
|
|
'password' => ['required', Password::defaults(), 'confirmed'],
|
|
])->validate();
|
|
|
|
$user->fill([
|
|
'password' => Hash::make($input['password']),
|
|
])->save();
|
|
$user->deleteAllSessions();
|
|
}
|
|
}
|