fix infinite loop in request_password

2014-09-12 22:38:44 +01:00
parent 0863bb3eca
commit cd2920c2cf
1 changed files with 1 additions and 1 deletions
@@ -3011,7 +3011,7 @@ class Auth(object):

        if self.settings.prevent_password_reset_attacks:
            key = request.vars.key
-            if not key and len(request.args)>0:
+            if not key and len(request.args)>1:
                key = request.args[-1]
            if key:
                session._reset_password_key = key