keith/friendica
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

don't allow blocked/unverified users to reset their password.

Browse source
This commit is contained in:
Friendika 2011-06-29 00:59:21 -07:00
parent 62340ba86b
commit 2a57847816
1 changed files with 6 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
mod/lostpass.php
View file

@ -7,12 +7,16 @@ function lostpass_post(&$a) {
if(! $email) if(! $email)
goaway($a->get_baseurl()); goaway($a->get_baseurl());
$r = q("SELECT * FROM `user` WHERE ( `email` = '%s' OR `nickname` = '%s' ) LIMIT 1", $r = q("SELECT * FROM `user` WHERE ( `email` = '%s' OR `nickname` = '%s' ) AND `verified` = 1 AND `blocked` = 0 LIMIT 1",
dbesc($email), dbesc($email),
dbesc($email) dbesc($email)
); );
if(! count($r))
if(! count($r)) {
notice( t('No valid account found.') . EOL);
goaway($a->get_baseurl()); goaway($a->get_baseurl());
}
$uid = $r[0]['uid']; $uid = $r[0]['uid'];
$username = $r[0]['username']; $username = $r[0]['username'];