diff options
author | Bjoern Schiessle <schiessle@owncloud.com> | 2012-06-13 17:22:28 +0200 |
---|---|---|
committer | Bjoern Schiessle <schiessle@owncloud.com> | 2012-06-13 17:26:30 +0200 |
commit | 48ee2651705d8a3bdddf1c0254211a208e1f02e5 (patch) | |
tree | d71a690d72adf7f485e8dc17ec4ede555d8297af /core | |
parent | 7868b25dcc81afdefad165b6ca17dd28e791c532 (diff) | |
download | nextcloud-server-48ee2651705d8a3bdddf1c0254211a208e1f02e5.tar.gz nextcloud-server-48ee2651705d8a3bdddf1c0254211a208e1f02e5.zip |
urlencode link fort password reset (bug #970)
Diffstat (limited to 'core')
-rw-r--r-- | core/lostpassword/index.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/core/lostpassword/index.php b/core/lostpassword/index.php index fff7e99a593..b32b56fcb39 100644 --- a/core/lostpassword/index.php +++ b/core/lostpassword/index.php @@ -17,7 +17,7 @@ if (isset($_POST['user'])) { OC_Preferences::setValue($_POST['user'], 'owncloud', 'lostpassword', $token); $email = OC_Preferences::getValue($_POST['user'], 'settings', 'email', ''); if (!empty($email) and isset($_POST['sectoken']) and isset($_SESSION['sectoken']) and ($_POST['sectoken']==$_SESSION['sectoken']) ) { - $link = OC_Helper::linkToAbsolute('core/lostpassword', 'resetpassword.php').'?user='.$_POST['user'].'&token='.$token; + $link = OC_Helper::linkToAbsolute('core/lostpassword', 'resetpassword.php').'?user='.urlencode($_POST['user']).'&token='.$token; $tmpl = new OC_Template('core/lostpassword', 'email'); $tmpl->assign('link', $link); $msg = $tmpl->fetchPage(); |