fanbinit/rhymix
1
0
Fork 0
mirror of https://github.com/Lastorder-DC/rhymix.git synced 2026-04-02 01:52:10 +09:00
Code Issues Projects Releases Packages Wiki Activity

More validity checks for reset password

Browse source
This commit is contained in:
Kijin Sung 2023-11-29 21:59:28 +09:00
parent a45373c113
commit 64148f0544
3 changed files with 18 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

10
modules/member/member.controller.php
View file

@ -1226,6 +1226,13 @@ class MemberController extends Member
throw new Rhymix\Framework\Exception('msg_invalid_auth_key');
}
$member_srl = $output->data->member_srl;
if (!$member_srl || $output->data->auth_type !== 'password_v2')
{
executeQuery('member.deleteAuthMail', ['auth_key' => $vars->auth_key]);
throw new Rhymix\Framework\Exception('msg_invalid_auth_key');
}
$expires = (intval($config->authmail_expires) * intval($config->authmail_expires_unit)) ?: 86400;
if(ztime($output->data->regdate) < time() - $expires)
{
@ -1233,9 +1240,6 @@ class MemberController extends Member
throw new Rhymix\Framework\Exception('msg_expired_auth_key');
}
// Extract the necessary information in advance
$member_srl = $output->data->member_srl;
// Update the password
$args = new stdClass;
$args->member_srl = $member_srl;