summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorFlorian Pritz <bluewind@xinu.at>2013-09-02 21:55:39 +0200
committerFlorian Pritz <bluewind@xinu.at>2013-09-02 21:56:25 +0200
commitfbd587a62dc1d84e4ebf3917ecdb86270ea8a48d (patch)
treeea34089b7c3770674c79e47fb98e6809c38da279
parentbb176a8782d8343d72a298d6ab28431886c7196b (diff)
Display domain of email address when resetting password
Signed-off-by: Florian Pritz <bluewind@xinu.at>
-rw-r--r--application/controllers/user.php3
-rw-r--r--application/views/user/reset_password_link_sent.php2
2 files changed, 3 insertions, 2 deletions
diff --git a/application/controllers/user.php b/application/controllers/user.php
index 37c84b1ed..498a626d7 100644
--- a/application/controllers/user.php
+++ b/application/controllers/user.php
@@ -330,7 +330,8 @@ class User extends MY_Controller {
);
$this->email->send();
- $this->data["email"] = $userinfo["email"];
+ // don't disclose full email addresses
+ $this->data["email_domain"] = substr($userinfo["email"], strpos($userinfo["email"], "@") + 1);
$this->load->view('header', $this->data);
$this->load->view($this->var->view_dir.'reset_password_link_sent', $this->data);
diff --git a/application/views/user/reset_password_link_sent.php b/application/views/user/reset_password_link_sent.php
index 7734d9c81..a5b249f89 100644
--- a/application/views/user/reset_password_link_sent.php
+++ b/application/views/user/reset_password_link_sent.php
@@ -1,3 +1,3 @@
<p>
- A mail containing your password reset link has been sent to "<?php echo htmlentities($email); ?>".
+ A mail containing your password reset link has been sent to your email address at <?php echo htmlentities($email_domain); ?>.
</p>