Ensure only own addresses are updated (#10397) (#10399)

This commit is contained in:
guillep2k 2020-02-21 10:35:17 -03:00 committed by GitHub
parent 34e3644ada
commit 3cee15e6f9
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 2 additions and 2 deletions

View file

@ -989,7 +989,7 @@ func VerifyActiveEmailCode(code, email string) *EmailAddress {
data := com.ToStr(user.ID) + email + user.LowerName + user.Passwd + user.Rands data := com.ToStr(user.ID) + email + user.LowerName + user.Passwd + user.Rands
if base.VerifyTimeLimitCode(data, minutes, prefix) { if base.VerifyTimeLimitCode(data, minutes, prefix) {
emailAddress := &EmailAddress{Email: email} emailAddress := &EmailAddress{UID: user.ID, Email: email}
if has, _ := x.Get(emailAddress); has { if has, _ := x.Get(emailAddress); has {
return emailAddress return emailAddress
} }

View file

@ -201,7 +201,7 @@ func MakeEmailPrimary(email *EmailAddress) error {
} }
// Make sure the former primary email doesn't disappear. // Make sure the former primary email doesn't disappear.
formerPrimaryEmail := &EmailAddress{Email: user.Email} formerPrimaryEmail := &EmailAddress{UID: user.ID, Email: user.Email}
has, err = x.Get(formerPrimaryEmail) has, err = x.Get(formerPrimaryEmail)
if err != nil { if err != nil {
return err return err