Don't send new password if email sending fails #818

Admidio · Sep 28, 2018 · 0148609 · 0148609
1 parent 450de2e
commit 0148609
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/adm_program/system/lost_password.php b/adm_program/system/lost_password.php
@@ -139,6 +139,15 @@
     }
     catch(AdmException $e)
     {
+        if(is_object($user))
+        {
+            // reset the column usr_new_password
+            $user->setPassword('', true, false);
+            $user->setValue('usr_activation_code', '');
+            $user->saveChangesWithoutRights();
+            $user->save(false);
+        }
+
         $e->showHtml();
         // => EXIT
     }