change password

web/views/profile.py

@@ -10,6 +10,7 @@ class ProfileView(BaseView):
     view_file = 'profile.html'
 
     def get(self):
+        self.context['err'] = 'err' in self.request.GET
         self.context['owner'] = not hasattr(self, 'customUser') or self.customUser == self.request.user
         self.context['account'] = getattr(self, 'customUser', None) or self.request.user
 
@@ -18,6 +19,8 @@ class ProfileView(BaseView):
         return self
 
     def post_change_password(self):
+        if self.request.POST['password'] != self.request.POST['repeat']:
+            return '/profile?err=true'
         self.request.user.set_password(self.request.POST['password'])
         self.request.user.save()
         login(self.request, self.request.user)