Merge pull request #496 from rpedroso/reset_password_infinite_loop

fix infinite loop in request_password
2014-09-12 17:44:40 -05:00
parent 0863bb3eca cd2920c2cf
commit c2b1547802
1 changed files with 1 additions and 1 deletions
@@ -3011,7 +3011,7 @@ class Auth(object):

        if self.settings.prevent_password_reset_attacks:
            key = request.vars.key
-            if not key and len(request.args)>0:
+            if not key and len(request.args)>1:
                key = request.args[-1]
            if key:
                session._reset_password_key = key