carpathianflorist
/
MarseyWorld
forked from MarseyWorld/MarseyWorld
1
0
Fork 0
Code Pull Requests Activity

fds

master
Aevann1 2022-01-21 12:44:12 +02:00
parent da3cb04dc8
commit 7275a0b8c4
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
files/routes/login.py
View File

@ -396,6 +396,8 @@ def get_reset():
user = g.db.query(User).filter_by(id=user_id).one_or_none() user = g.db.query(User).filter_by(id=user_id).one_or_none()
if not user: abort(400)
if not validate_hash(f"{user_id}+{timestamp}+forgot+{user.login_nonce}", token): if not validate_hash(f"{user_id}+{timestamp}+forgot+{user.login_nonce}", token):
abort(400) abort(400)