MDL-11058 changeme password not always required to be changed

diff --git a/login/index.php b/login/index.php
index f494f5c93e4cf90d6bf99b0cb4a5c1b365dd6e05..77133a4815f5e03d2c2df1f7f74ef4e64d3ed8ec 100644 (file)
--- a/login/index.php
+++ b/login/index.php
@@ -175,6 +175,10 @@ httpsrequired();
 
         /// check whether the user should be changing password
             if (get_user_preferences('auth_forcepasswordchange', false) || $frm->password == 'changeme'){
+                if ($frm->password == 'changeme') {
+                    //force the change
+                    set_user_preference('auth_forcepasswordchange', true);
+                }
                 //Select password change url
                 if ($userauth->can_change_password()) {
                     if ($changeurl = $userauth->change_password_url()) {