Password Reset: Adjust username check when username_format set to email.

This commit is contained in:
Nate
2020-10-29 15:51:31 -06:00
parent bd68c4d2e4
commit bc69b99cb0

View File

@@ -171,8 +171,10 @@
$password_new = trim($_REQUEST['password_new']);
$password_repeat = trim($_REQUEST['password_repeat']);
//strip off @domain if submitted with username, as the valid domain for the reset is already being provided in the where clause below
$username = substr_count($username, '@') != 0 ? explode('@', $username)[0] : $username;
//if not requiring usernames to be of email format, strip off @domain as the valid domain for the reset is already being provided in the where clause below
if ($_SESSION['users']['username_format']['text'] != 'email') {
$username = substr_count($username, '@') != 0 ? explode('@', $username)[0] : $username;
}
if ($username !== '' &&
$username === $_SESSION['valid_username'] &&