From cd2920c2cf956ba98607ad0dd5403d9a10d03659 Mon Sep 17 00:00:00 2001 From: Ricardo Pedroso Date: Fri, 12 Sep 2014 22:38:44 +0100 Subject: [PATCH] fix infinite loop in request_password --- gluon/tools.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gluon/tools.py b/gluon/tools.py index b7f4abc6..f4f54f6d 100644 --- a/gluon/tools.py +++ b/gluon/tools.py @@ -3011,7 +3011,7 @@ class Auth(object): if self.settings.prevent_password_reset_attacks: key = request.vars.key - if not key and len(request.args)>0: + if not key and len(request.args)>1: key = request.args[-1] if key: session._reset_password_key = key