From: Alan Knowles Date: Fri, 7 Dec 2018 02:32:37 +0000 (+0800) Subject: Pman/Login.php X-Git-Url: http://git.roojs.org/?p=Pman.Base;a=commitdiff_plain;h=e905a5cbc0364f5586c8c9cbdb02dbc7fcf9e7aa Pman/Login.php --- diff --git a/Pman/Login.php b/Pman/Login.php index 5b58247..4aa9e10 100644 --- a/Pman/Login.php +++ b/Pman/Login.php @@ -261,8 +261,11 @@ class Pman_Login extends Pman if (empty($_REQUEST['id']) || empty($_REQUEST['ts']) || empty($_REQUEST['key']) || - empty($_REQUEST['key']) || - + empty($_REQUEST['password1']) || + empty($_REQUEST['password2']) + ) { + $this->jerr("Invalid request to reset password"); + } $this->resetPassword() }