Invalidate captcha after it is used

2021-06-05 15:03:43 -07:00
parent 2455cec7ac
commit 728ba61450
1 changed files with 3 additions and 0 deletions
--- a/app/Validator/PasswordResetValidator.php
+++ b/app/Validator/PasswordResetValidator.php
@@ -85,6 +85,9 @@ class PasswordResetValidator extends BaseValidator
            if (! $result) {
                $errors['captcha'] = array(t('Invalid captcha'));
            }
+
+            // Invalidate captcha to avoid reuse.
+            session_remove('captcha');
        }

        return array($result, $errors);