- Fixed bug #4416: added status checks to user_pass() to prevent mailing

new passwords to blocked user accounts.
4.3.x
Dries Buytaert 2003-12-05 08:21:45 +00:00
parent 7818980734
commit d6498bc700
1 changed files with 5 additions and 4 deletions

View File

@ -630,8 +630,9 @@ function user_login($edit = array(), $msg = "") {
}
}
/*
** Try each external authentication source in series. Register user if successful.
/*
** Try each external authentication source in series. Register user if
** successful.
*/
else if (!$user->uid && $server) {
@ -760,11 +761,11 @@ function user_pass($edit = array()) {
global $base_url;
if ($edit["name"]) {
$account = db_fetch_object(db_query("SELECT uid, name, mail FROM {users} WHERE name = '%s'", $edit["name"]));
$account = db_fetch_object(db_query("SELECT uid, name, mail FROM {users} WHERE status = 1 AND name = '%s'", $edit["name"]));
if (!$account) $error = t("Sorry. The username <i>%s</i> is not recognized.", array("%s" => $edit["name"]));
}
else if ($edit["mail"]) {
$account = db_fetch_object(db_query("SELECT uid, name, mail FROM {users} WHERE mail = '%s'", $edit["mail"]));
$account = db_fetch_object(db_query("SELECT uid, name, mail FROM {users} WHERE status = 1 AND mail = '%s'", $edit["mail"]));
if (!$account) $error = t("Sorry. The e-mail address <i>%s</i> is not recognized.", array("%s" => $edit["mail"]));
}
if ($account) {