From: Bjoern Schiessle <schiessle@owncloud.com>
Date: Wed, 13 Jun 2012 15:22:28 +0000 (+0200)
Subject: urlencode link fort password reset (bug #970)
X-Git-Tag: v4.5.0beta1~74^2~420^2~52
X-Git-Url: https://source.dussan.org/?a=commitdiff_plain;h=b9d5f510c37b3591cb969132d3099561dc55a89f;p=nextcloud-server.git

urlencode link fort password reset (bug #970)
---

diff --git a/core/lostpassword/index.php b/core/lostpassword/index.php
index 6bed7bdd93f..bd2a3e897e5 100644
--- a/core/lostpassword/index.php
+++ b/core/lostpassword/index.php
@@ -17,7 +17,7 @@ if (isset($_POST['user'])) {
 		OC_Preferences::setValue($_POST['user'], 'owncloud', 'lostpassword', $token);
 		$email = OC_Preferences::getValue($_POST['user'], 'settings', 'email', '');
 		if (!empty($email) and isset($_POST['sectoken']) and isset($_SESSION['sectoken']) and ($_POST['sectoken']==$_SESSION['sectoken']) ) {
-			$link = OC_Helper::linkToAbsolute('core/lostpassword', 'resetpassword.php').'?user='.$_POST['user'].'&token='.$token;
+			$link = OC_Helper::linkToAbsolute('core/lostpassword', 'resetpassword.php').'?user='.urlencode($_POST['user']).'&token='.$token;
 			$tmpl = new OC_Template('core/lostpassword', 'email');
 			$tmpl->assign('link', $link);
 			$msg = $tmpl->fetchPage();