From fbd587a62dc1d84e4ebf3917ecdb86270ea8a48d Mon Sep 17 00:00:00 2001 From: Florian Pritz Date: Mon, 2 Sep 2013 21:55:39 +0200 Subject: Display domain of email address when resetting password Signed-off-by: Florian Pritz --- application/controllers/user.php | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'application/controllers/user.php') diff --git a/application/controllers/user.php b/application/controllers/user.php index 37c84b1ed..498a626d7 100644 --- a/application/controllers/user.php +++ b/application/controllers/user.php @@ -330,7 +330,8 @@ class User extends MY_Controller { ); $this->email->send(); - $this->data["email"] = $userinfo["email"]; + // don't disclose full email addresses + $this->data["email_domain"] = substr($userinfo["email"], strpos($userinfo["email"], "@") + 1); $this->load->view('header', $this->data); $this->load->view($this->var->view_dir.'reset_password_link_sent', $this->data); -- cgit v1.2.3-24-g4f1b