Fixed to prevent a password reset to login an inactive user.

2010-02-09 14:47:13 +01:00
parent 2b107c1610
commit 73f6430a60
2 changed files with 6 additions and 1 deletions
--- a/src/IDF/Form/PasswordReset.php
+++ b/src/IDF/Form/PasswordReset.php
@@ -73,6 +73,9 @@ class IDF_Form_PasswordReset extends Pluf_Form
        if ($this->cleaned_data['password'] != $this->cleaned_data['password2']) {
            throw new Pluf_Form_Invalid(__('The two passwords must be the same.'));
        }
+        if (!$this->user->active) {
+            throw new Pluf_Form_Invalid(__('This account is not active. Please contact the forge administrator to activate it.'));
+        }
        return $this->cleaned_data;
    }