Don't allow password changing if the user isn't confirmed yet

2003-05-24 02:25:57 +00:00
parent 8fdd5ab2b3
commit 5c0567b4cd
1 changed files with 4 additions and 0 deletions
@@ -43,6 +43,10 @@
 			if (!$user = get_user_info_from_db("email", $frm->email)) {
                error("No such user with this address:  $frm->email");
            }
+
+            if (empty($user->confirmed)) {
+                error(get_string("confirmednot"));
+            }
            
            $user->secret = random_string(15);