From: Alan Knowles <alan@roojs.com>
Date: Fri, 7 Dec 2018 02:33:36 +0000 (+0800)
Subject: Pman/Login.php
X-Git-Url: http://git.roojs.org/?p=Pman.Base;a=commitdiff_plain;h=c90ad5c9936185071622b9bf9e10617775ca1020

Pman/Login.php
---

diff --git a/Pman/Login.php b/Pman/Login.php
index 4aa9e10..a81d6aa 100644
--- a/Pman/Login.php
+++ b/Pman/Login.php
@@ -262,11 +262,13 @@ class Pman_Login extends Pman
 		empty($_REQUEST['ts']) ||
 		empty($_REQUEST['key']) ||
 		empty($_REQUEST['password1']) ||
-		empty($_REQUEST['password2'])
+		empty($_REQUEST['password2']) ||
+		($_REQUEST['password1'] != $_REQUEST['password2'])
 	    ) {
 		$this->jerr("Invalid request to reset password");
 	    }
-	    $this->resetPassword()
+	    
+	    $this->resetPassword($_REQUEST['id'], $_REQUEST['ts'], $_REQUEST['key'], $_REQUEST['password1'] );
 	}
 	
 	// this is 'classic' change password...