From 16470b1d421766d09281c87059a90b84c3a2e100 Mon Sep 17 00:00:00 2001 From: chris Date: Sat, 4 Nov 2006 18:43:49 +0100 Subject: add standard username cleaning to resend password (fixes bug#961) darcs-hash:20061104174349-9b6ab-74e7c5a3e7a14d12253d36a9d09a35866125a7ec.gz --- inc/auth.php | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'inc/auth.php') diff --git a/inc/auth.php b/inc/auth.php index 2e9d51767..07f335627 100644 --- a/inc/auth.php +++ b/inc/auth.php @@ -654,7 +654,8 @@ function act_resendpwd(){ msg($lang['resendpwdmissing'], -1); return false; } else { - $user = $_POST['login']; + $_POST['login'] = preg_replace('/.*:/','',$_POST['login']); + $user = cleanID($_POST['login']); } $userinfo = $auth->getUserData($user); -- cgit v1.2.3