Only allow non-logged-in users in procMemberResetPassword

This commit is contained in:
Kijin Sung 2023-11-29 22:02:04 +09:00
parent 6a308386bc
commit 4f6c05f735

View file

@ -1212,6 +1212,10 @@ class MemberController extends Member
{
$config = MemberModel::getMemberConfig();
$vars = Context::getRequestVars();
if ($this->user->member_srl)
{
throw new Rhymix\Framework\Exception('already_logged');
}
// Check auth_key
if (empty($vars->auth_key))