Added another level of check on the reset password key.
This commit is contained in:
parent
c488278ce1
commit
32507085b4
@ -95,6 +95,10 @@ class IDF_Form_PasswordInputKey extends Pluf_Form
|
||||
return false;
|
||||
}
|
||||
$cr = new Pluf_Crypt(md5(Pluf::f('secret_key')));
|
||||
return split(':', $cr->decrypt($encrypted), 3);
|
||||
$f = split(':', $cr->decrypt($encrypted), 3);
|
||||
if (count($f) != 3) {
|
||||
return false;
|
||||
}
|
||||
return $f;
|
||||
}
|
||||
}
|
||||
|
Loading…
Reference in New Issue
Block a user