bug #339 - lostpass sending to username, not email

This commit is contained in:
friendica 2012-03-20 01:50:20 -07:00
parent 5a5aadb743
commit 9df7972993

View file

@ -3,13 +3,13 @@
function lostpass_post(&$a) { function lostpass_post(&$a) {
$email = notags(trim($_POST['login-name'])); $loginame = notags(trim($_POST['login-name']));
if(! $email) if(! $loginame)
goaway(z_root()); goaway(z_root());
$r = q("SELECT * FROM `user` WHERE ( `email` = '%s' OR `nickname` = '%s' ) AND `verified` = 1 AND `blocked` = 0 LIMIT 1", $r = q("SELECT * FROM `user` WHERE ( `email` = '%s' OR `nickname` = '%s' ) AND `verified` = 1 AND `blocked` = 0 LIMIT 1",
dbesc($email), dbesc($loginame),
dbesc($email) dbesc($loginame)
); );
if(! count($r)) { if(! count($r)) {
@ -19,6 +19,7 @@ function lostpass_post(&$a) {
$uid = $r[0]['uid']; $uid = $r[0]['uid'];
$username = $r[0]['username']; $username = $r[0]['username'];
$email = $r[0]['email'];
$new_password = autoname(12) . mt_rand(100,9999); $new_password = autoname(12) . mt_rand(100,9999);
$new_password_encoded = hash('whirlpool',$new_password); $new_password_encoded = hash('whirlpool',$new_password);