dbxe/fusionpbx
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Password Reset: Adjust username check when username_format set to email.

Browse Source
This commit is contained in:
Nate
2020-10-29 15:51:31 -06:00
parent bd68c4d2e4
commit bc69b99cb0
1 changed files with 4 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
resources/login.php
+4 -2
View File
@@ -171,8 +171,10 @@
$password_new = trim($_REQUEST['password_new']); $password_new = trim($_REQUEST['password_new']);
$password_repeat = trim($_REQUEST['password_repeat']); $password_repeat = trim($_REQUEST['password_repeat']);
//strip off @domain if submitted with username, as the valid domain for the reset is already being provided in the where clause below //if not requiring usernames to be of email format, strip off @domain as the valid domain for the reset is already being provided in the where clause below
$username = substr_count($username, '@') != 0 ? explode('@', $username)[0] : $username; if ($_SESSION['users']['username_format']['text'] != 'email') {
$username = substr_count($username, '@') != 0 ? explode('@', $username)[0] : $username;
}
if ($username !== '' && if ($username !== '' &&
$username === $_SESSION['valid_username'] && $username === $_SESSION['valid_username'] &&