Merge pull request #3034 from fantasticfears/filter_system_user

disable sending email or show presence when forgot system user password
This commit is contained in:
Robin Ward
2014-12-19 16:52:01 -05:00
2 changed files with 16 additions and 3 deletions

View File

@ -153,14 +153,15 @@ class SessionController < ApplicationController
RateLimiter.new(nil, "forgot-password-min-#{request.remote_ip}", 3, 1.minute).performed!
user = User.find_by_username_or_email(params[:login])
if user.present?
user_presence = user.present? && user.id != Discourse::SYSTEM_USER_ID
if user_presence
email_token = user.email_tokens.create(email: user.email)
Jobs.enqueue(:user_email, type: :forgot_password, user_id: user.id, email_token: email_token.token)
end
json = { result: "ok" }
unless SiteSetting.forgot_password_strict
json[:user_found] = user.present?
json[:user_found] = user_presence
end
render json: json