(cp a335d70) fixes 787, check URL parameter "action" to avoid error messages

2026-06-02 04:15:05 +02:00 · 2017-09-28 15:04:02 +02:00
parent 6530720d51
commit 9cd6b7c90d
1 changed files with 2 additions and 0 deletions
@@ -37,6 +37,8 @@ check_status(ACCESS_FREE);

 trigger_notify('loc_begin_password');

+check_input_parameter('action', $_GET, false, '/^(lost|reset|none)$/');
+
 // +-----------------------------------------------------------------------+
 // | Functions                                                             |
 // +-----------------------------------------------------------------------+