Skip to content

Commit afa4214

Browse files
authored
Use Date facade instead of time() for password_confirmed_at check (#56270)
1 parent b108609 commit afa4214

File tree

1 file changed

+2
-1
lines changed

1 file changed

+2
-1
lines changed

src/Illuminate/Auth/Middleware/RequirePassword.php

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,6 +5,7 @@
55
use Closure;
66
use Illuminate\Contracts\Routing\ResponseFactory;
77
use Illuminate\Contracts\Routing\UrlGenerator;
8+
use Illuminate\Support\Facades\Date;
89

910
class RequirePassword
1011
{
@@ -92,7 +93,7 @@ public function handle($request, Closure $next, $redirectToRoute = null, $passwo
9293
*/
9394
protected function shouldConfirmPassword($request, $passwordTimeoutSeconds = null)
9495
{
95-
$confirmedAt = time() - $request->session()->get('auth.password_confirmed_at', 0);
96+
$confirmedAt = Date::now()->unix() - $request->session()->get('auth.password_confirmed_at', 0);
9697

9798
return $confirmedAt > ($passwordTimeoutSeconds ?? $this->passwordTimeout);
9899
}

0 commit comments

Comments
 (0)