[Mantisbt-cvs] mantisbt lost_pwd.php,1.5.6.1,1.5.6.1.8.1

[Victor B. <vb...@us...>]

Update of /cvsroot/mantisbt/mantisbt
In directory sc8-pr-cvs1.sourceforge.net:/tmp/cvs-serv11917

Modified Files:
      Tag: BRANCH_1_0_0
	lost_pwd.php 
Log Message:
Fixed #7037: Port: Login with disabled account possible.

Index: lost_pwd.php
===================================================================
RCS file: /cvsroot/mantisbt/mantisbt/lost_pwd.php,v
retrieving revision 1.5.6.1
retrieving revision 1.5.6.1.8.1
diff -u -d -r1.5.6.1 -r1.5.6.1.8.1
--- lost_pwd.php	22 Sep 2005 11:10:14 -0000	1.5.6.1
+++ lost_pwd.php	5 May 2006 16:35:50 -0000	1.5.6.1.8.1
@@ -38,7 +38,8 @@
 
 	$t_user_table = config_get( 'mantis_user_table' );
 
-	$query = 'SELECT id FROM ' . $t_user_table . ' WHERE username = \'' . $c_username . '\' and email = \'' . $c_email . '\'';
+	# @@@ Consider moving this query to user_api.php
+	$query = 'SELECT id FROM ' . $t_user_table . ' WHERE username = \'' . $c_username . '\' AND email = \'' . $c_email . '\' AND enabled=1';
 	$result = db_query( $query );
 
 	if ( 0 == db_num_rows( $result ) ) {