diff --git a/libraries/plugins/auth/AuthenticationCookie.php b/libraries/plugins/auth/AuthenticationCookie.php index 0cb425ae95..b413ff95fb 100644 --- a/libraries/plugins/auth/AuthenticationCookie.php +++ b/libraries/plugins/auth/AuthenticationCookie.php @@ -492,7 +492,11 @@ class AuthenticationCookie extends AuthenticationPlugin $this->storeUsernameCookie($cfg['Server']['user']); // Duration = as configured - $this->storePasswordCookie($cfg['Server']['password']); + // Do not store password cookie on password change as we will + // set the cookie again after password has been changed + if (! isset($_POST['change_pw'])) { + $this->storePasswordCookie($cfg['Server']['password']); + } // Set server cookies if required (once per session) and, in this case, // force reload to ensure the client accepts cookies