fixes 787, check URL parameter "action" to avoid error messages

2026-03-28 17:42:57 +01:00 · 2017-09-28 15:02:41 +02:00
parent 46ddfabc38
commit a335d70418
1 changed files with 2 additions and 0 deletions
--- a/password.php
+++ b/password.php
@@ -37,6 +37,8 @@ check_status(ACCESS_FREE);

 trigger_notify('loc_begin_password');

+check_input_parameter('action', $_GET, false, '/^(lost|reset|none)$/');
+
 // +-----------------------------------------------------------------------+
 // | Functions                                                             |
 // +-----------------------------------------------------------------------+