From 5ea9fc197dc286d4dee78df24f6422a92797cdd5 Mon Sep 17 00:00:00 2001 From: Lukas Fleischer Date: Tue, 19 Apr 2011 23:59:19 +0200 Subject: Use HTTPs for links in password reset confirmation mails. Signed-off-by: Lukas Fleischer --- web/html/passreset.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/web/html/passreset.php b/web/html/passreset.php index 0b0b0309..2c7801d7 100644 --- a/web/html/passreset.php +++ b/web/html/passreset.php @@ -67,7 +67,7 @@ if (isset($_GET['resetkey'], $_POST['email'], $_POST['password'], $_POST['confir 'your password follow the link below, otherwise ignore '. 'this message and nothing will happen.'). "\n\n". - 'http://aur.archlinux.org/passreset.php?'. + 'https://aur.archlinux.org/passreset.php?'. "resetkey={$resetkey}"; $body = wordwrap($body, 70); $headers = "To: {$email}\nReply-to: nobody@archlinux.org\nFrom:aur-notify@archlinux.org\nX-Mailer: PHP\nX-MimeOLE: Produced By AUR"; -- cgit v1.2.3-24-g4f1b