Only allow password reset if user is active

This commit is contained in:
snipe 2018-08-14 17:46:29 -07:00
parent e81b221fd1
commit 0100c56046

View file

@ -5,6 +5,7 @@ namespace App\Http\Controllers\Auth;
use App\Http\Controllers\Controller; use App\Http\Controllers\Controller;
use Illuminate\Foundation\Auth\SendsPasswordResetEmails; use Illuminate\Foundation\Auth\SendsPasswordResetEmails;
use Illuminate\Http\Request; use Illuminate\Http\Request;
use App\Models\User;
class ForgotPasswordController extends Controller class ForgotPasswordController extends Controller
{ {
@ -50,6 +51,12 @@ class ForgotPasswordController extends Controller
public function sendResetLinkEmail(Request $request) public function sendResetLinkEmail(Request $request)
{ {
$this->validate($request, ['email' => 'required|email']); $this->validate($request, ['email' => 'required|email']);
$valid_user = User::where('email','=',$request->input('email'))->first();
if ($valid_user->count() == 0 ) {
return back()->withErrors('error','This email address does not exist, or is not activated.');
}
// We will send the password reset link to this user. Once we have attempted // We will send the password reset link to this user. Once we have attempted
// to send the link, we will examine the response then see the message we // to send the link, we will examine the response then see the message we