AS1024/Kanboard-Prod
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Invalidate captcha after it is used

Browse Source
This commit is contained in:
Frédéric Guillot
2021-06-05 15:03:43 -07:00
committed by fguillot
parent 2455cec7ac
commit 728ba61450
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
app/Validator/PasswordResetValidator.php
View File

@@ -85,6 +85,9 @@ class PasswordResetValidator extends BaseValidator
if (! $result) { if (! $result) {
$errors['captcha'] = array(t('Invalid captcha')); $errors['captcha'] = array(t('Invalid captcha'));
} }
// Invalidate captcha to avoid reuse.
session_remove('captcha');
} }
return array($result, $errors); return array($result, $errors);