浏览代码

Password Reset: Adjust username check when username_format set to email.

Nate 4 年之前
父节点
当前提交
61b55a7269
共有 1 个文件被更改,包括 4 次插入2 次删除
  1. 4 2
      resources/login.php

+ 4 - 2
resources/login.php

@@ -171,8 +171,10 @@
 		$password_new = trim($_REQUEST['password_new']);
 		$password_repeat = trim($_REQUEST['password_repeat']);
 
-		//strip off @domain if submitted with username, as the valid domain for the reset is already being provided in the where clause below
-		$username = substr_count($username, '@') != 0 ? explode('@', $username)[0] : $username;
+		//if not requiring usernames to be of email format, strip off @domain as the valid domain for the reset is already being provided in the where clause below
+		if ($_SESSION['users']['username_format']['text'] != 'email') {
+			$username = substr_count($username, '@') != 0 ? explode('@', $username)[0] : $username;
+		}
 
 		if ($username !== '' &&
 			$username === $_SESSION['valid_username'] &&