mirror of
https://git.tt-rss.org/git/tt-rss.git
synced 2025-12-13 08:35:55 +00:00
forgotpass: use type strict comparison for reset token
This commit is contained in:
@@ -940,7 +940,7 @@ class Handler_Public extends Handler {
|
||||
|
||||
if ($timestamp && $resetpass_token &&
|
||||
$timestamp >= time() - 15*60*60 &&
|
||||
$resetpass_token == $hash) {
|
||||
$resetpass_token === $hash) {
|
||||
|
||||
$sth = $this->pdo->prepare("UPDATE ttrss_users SET resetpass_token = NULL
|
||||
WHERE id = ?");
|
||||
|
||||
Reference in New Issue
Block a user