Added another level of check on the reset password key.
This commit is contained in:
parent
c488278ce1
commit
32507085b4
@ -95,6 +95,10 @@ class IDF_Form_PasswordInputKey extends Pluf_Form
|
|||||||
return false;
|
return false;
|
||||||
}
|
}
|
||||||
$cr = new Pluf_Crypt(md5(Pluf::f('secret_key')));
|
$cr = new Pluf_Crypt(md5(Pluf::f('secret_key')));
|
||||||
return split(':', $cr->decrypt($encrypted), 3);
|
$f = split(':', $cr->decrypt($encrypted), 3);
|
||||||
|
if (count($f) != 3) {
|
||||||
|
return false;
|
||||||
|
}
|
||||||
|
return $f;
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
Loading…
Reference in New Issue
Block a user