fds

2022-01-21 12:44:12 +02:00 · 2022-01-21 12:44:12 +02:00 · 7275a0b8c4
parent da3cb04dc8
commit 7275a0b8c4
1 changed files with 2 additions and 0 deletions
--- a/files/routes/login.py
+++ b/files/routes/login.py
@ -396,6 +396,8 @@ def get_reset():

 	user = g.db.query(User).filter_by(id=user_id).one_or_none()
 	
+	if not user: abort(400)
+
 	if not validate_hash(f"{user_id}+{timestamp}+forgot+{user.login_nonce}", token):
 		abort(400)