Only allow activated users to reset their password

This commit is contained in:
snipe 2018-08-14 18:04:27 -07:00
parent 2d0df24ef3
commit 25097bce31

View file

@ -55,7 +55,10 @@ class ForgotPasswordController extends Controller
// to send the link, we will examine the response then see the message we
// need to show to the user. Finally, we'll send out a proper response.
$response = $this->broker()->sendResetLink(
$request->only('email')
array_merge(
$request->only('email'),
['activated' => '1']
)
);
if ($response === \Password::RESET_LINK_SENT) {