diff --git a/login/forgot_password.php b/login/forgot_password.php index 82961dedbad..221e2dbd8a3 100644 --- a/login/forgot_password.php +++ b/login/forgot_password.php @@ -43,6 +43,10 @@ if (!$user = get_user_info_from_db("email", $frm->email)) { error("No such user with this address: $frm->email"); } + + if (empty($user->confirmed)) { + error(get_string("confirmednot")); + } $user->secret = random_string(15);