silverstripe / silverstripe-activedirectory

                return $this->controller->redirect($this->controller->Link('changepassword'));

            }

            $loginResult = $service->authenticate($userData['samaccountname'], $data['OldPassword']);

            if (!$loginResult['success']) {

                $this->clearMessage();

                $this->sessionMessage(

                    _t('Member.ERRORPASSWORDNOTMATCH', "Your current password does not match, please try again"),

                    "bad"

                );

                // redirect back to the form, instead of using redirectBack() which could send the user elsewhere.

                return $this->controller->redirect($this->controller->Link('changepassword'));

            }

        }

        if (!$member) {

                // redirect back to the form, instead of using redirectBack() which could send the user elsewhere.

                return $this->controller->redirect($this->controller->Link('changepassword'));

            }

        } else {

            $this->clearMessage();

            $this->sessionMessage(

                _t('Member.ERRORNEWPASSWORD', "You have entered your new password differently, try again"),

                "bad");

            // redirect back to the form, instead of using redirectBack() which could send the user elsewhere.

            return $this->controller->redirect($this->controller->Link('changepassword'));

        }

    }

}