diff options
| -rw-r--r-- | application/controllers/user.php | 3 | ||||
| -rw-r--r-- | application/views/user/reset_password_link_sent.php | 2 |
2 files changed, 3 insertions, 2 deletions
diff --git a/application/controllers/user.php b/application/controllers/user.php index 37c84b1ed..498a626d7 100644 --- a/application/controllers/user.php +++ b/application/controllers/user.php @@ -330,7 +330,8 @@ class User extends MY_Controller { ); $this->email->send(); - $this->data["email"] = $userinfo["email"]; + // don't disclose full email addresses + $this->data["email_domain"] = substr($userinfo["email"], strpos($userinfo["email"], "@") + 1); $this->load->view('header', $this->data); $this->load->view($this->var->view_dir.'reset_password_link_sent', $this->data); diff --git a/application/views/user/reset_password_link_sent.php b/application/views/user/reset_password_link_sent.php index 7734d9c81..a5b249f89 100644 --- a/application/views/user/reset_password_link_sent.php +++ b/application/views/user/reset_password_link_sent.php @@ -1,3 +1,3 @@ <p> - A mail containing your password reset link has been sent to "<?php echo htmlentities($email); ?>". + A mail containing your password reset link has been sent to your email address at <?php echo htmlentities($email_domain); ?>. </p> |