Guranteed somebody will paste the verification link and not the token, especially before all the translations are completed. But even then...

This commit is contained in:
zotlabs 2018-01-27 15:20:43 -08:00
parent 69099a2732
commit 21f464a557

View file

@ -8,7 +8,7 @@ class Email_validation extends \Zotlabs\Web\Controller {
function post() {
if($_POST['token']) {
if(! account_approve(trim($_POST['token']))) {
if(! account_approve(trim(basename($_POST['token'])))) {
notice('Token verification failed.');
}
}