- Fixed bug #4416: added status checks to user_pass() to prevent mailing
new passwords to blocked user accounts.4.3.x
parent
7818980734
commit
d6498bc700
|
@ -630,8 +630,9 @@ function user_login($edit = array(), $msg = "") {
|
|||
}
|
||||
}
|
||||
|
||||
/*
|
||||
** Try each external authentication source in series. Register user if successful.
|
||||
/*
|
||||
** Try each external authentication source in series. Register user if
|
||||
** successful.
|
||||
*/
|
||||
|
||||
else if (!$user->uid && $server) {
|
||||
|
@ -760,11 +761,11 @@ function user_pass($edit = array()) {
|
|||
global $base_url;
|
||||
|
||||
if ($edit["name"]) {
|
||||
$account = db_fetch_object(db_query("SELECT uid, name, mail FROM {users} WHERE name = '%s'", $edit["name"]));
|
||||
$account = db_fetch_object(db_query("SELECT uid, name, mail FROM {users} WHERE status = 1 AND name = '%s'", $edit["name"]));
|
||||
if (!$account) $error = t("Sorry. The username <i>%s</i> is not recognized.", array("%s" => $edit["name"]));
|
||||
}
|
||||
else if ($edit["mail"]) {
|
||||
$account = db_fetch_object(db_query("SELECT uid, name, mail FROM {users} WHERE mail = '%s'", $edit["mail"]));
|
||||
$account = db_fetch_object(db_query("SELECT uid, name, mail FROM {users} WHERE status = 1 AND mail = '%s'", $edit["mail"]));
|
||||
if (!$account) $error = t("Sorry. The e-mail address <i>%s</i> is not recognized.", array("%s" => $edit["mail"]));
|
||||
}
|
||||
if ($account) {
|
||||
|
|
Loading…
Reference in New Issue