Display domain of email address when resetting password

Signed-off-by: Florian Pritz <bluewind@xinu.at>

1 files changed, 2 insertions, 1 deletions

diff --git a/application/controllers/user.php b/application/controllers/user.php
index 37c84b1ed..498a626d7 100644
--- a/application/controllers/user.php
+++ b/application/controllers/user.php
@@ -330,7 +330,8 @@ class User extends MY_Controller {
 			);
 		$this->email->send();
 
-		$this->data["email"] = $userinfo["email"];
+		// don't disclose full email addresses
+		$this->data["email_domain"] = substr($userinfo["email"], strpos($userinfo["email"], "@") + 1);
 
 		$this->load->view('header', $this->data);
 		$this->load->view($this->var->view_dir.'reset_password_link_sent', $this->data);