Password Reset: Always set valid domain session var.
This commit is contained in:
+1
-3
@@ -53,9 +53,7 @@
|
|||||||
//set flag
|
//set flag
|
||||||
if ($username != '' && $domain_uuid == $_SESSION['domain_uuid'] && $password_submitted == $password_current) {
|
if ($username != '' && $domain_uuid == $_SESSION['domain_uuid'] && $password_submitted == $password_current) {
|
||||||
$password_reset = true;
|
$password_reset = true;
|
||||||
if (!isset($_SESSION['valid_username']) || $_SESSION['valid_username'] == '') {
|
$_SESSION['valid_username'] = $username;
|
||||||
$_SESSION['valid_username'] = $username;
|
|
||||||
}
|
|
||||||
}
|
}
|
||||||
else {
|
else {
|
||||||
header("Location: /login.php");
|
header("Location: /login.php");
|
||||||
|
|||||||
Reference in New Issue
Block a user