diff options
| author | Bjoern Schiessle <schiessle@owncloud.com> | 2012-06-13 17:22:28 +0200 |
|---|---|---|
| committer | Bjoern Schiessle <schiessle@owncloud.com> | 2012-06-13 17:22:28 +0200 |
| commit | b9d5f510c37b3591cb969132d3099561dc55a89f (patch) | |
| tree | 1e81ac45dc40bd8f53a2015c847f617df0a1ebbd /core/lostpassword | |
| parent | 6f55a528581f5e6ef830cb107f2cdf756ad2f79e (diff) | |
| download | nextcloud-server-b9d5f510c37b3591cb969132d3099561dc55a89f.tar.gz nextcloud-server-b9d5f510c37b3591cb969132d3099561dc55a89f.zip | |
urlencode link fort password reset (bug #970)
Diffstat (limited to 'core/lostpassword')
| -rw-r--r-- | core/lostpassword/index.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/core/lostpassword/index.php b/core/lostpassword/index.php index 6bed7bdd93f..bd2a3e897e5 100644 --- a/core/lostpassword/index.php +++ b/core/lostpassword/index.php @@ -17,7 +17,7 @@ if (isset($_POST['user'])) { OC_Preferences::setValue($_POST['user'], 'owncloud', 'lostpassword', $token); $email = OC_Preferences::getValue($_POST['user'], 'settings', 'email', ''); if (!empty($email) and isset($_POST['sectoken']) and isset($_SESSION['sectoken']) and ($_POST['sectoken']==$_SESSION['sectoken']) ) { - $link = OC_Helper::linkToAbsolute('core/lostpassword', 'resetpassword.php').'?user='.$_POST['user'].'&token='.$token; + $link = OC_Helper::linkToAbsolute('core/lostpassword', 'resetpassword.php').'?user='.urlencode($_POST['user']).'&token='.$token; $tmpl = new OC_Template('core/lostpassword', 'email'); $tmpl->assign('link', $link); $msg = $tmpl->fetchPage(); |