https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=18025

Jonathan Druart <jonathan.dru...@bugs.koha-community.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
  Attachment #60245|0                           |1
        is obsolete|                            |
  Attachment #60295|0                           |1
        is obsolete|                            |
  Attachment #60296|0                           |1
        is obsolete|                            |

--- Comment #12 from Jonathan Druart <jonathan.dru...@bugs.koha-community.org> 
---
Created attachment 60303
  -->
https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=60303&action=edit
Bug 18025 - Expired password recovery links cause sql crash

When a user gets an email, but doesn't act or visit it within two days,
     attempting to create a new one causes a collision. We should just
     delete the old one, assuming they still want to reset their
     password.

To test:
create yourself a borrower with a userid and password.
Attempt a password recovery on the OPAC
update the entry in the database for that user to have an expired token
e.g. update borrower_password_recovery set valid_until = '2017-01-25
03:25:26' where borrowernumber = 12;
Attempt another password recovery operation - should error
apply the patch
Try it again - no error, new token is generated and additional email
with new link is sent.

Issue reproduced - is resolved by patch
Signed-off-by: Marc VĂ©ron <ve...@veron.ch>

Signed-off-by: Jonathan Druart <jonathan.dru...@biblibre.com>

-- 
You are receiving this mail because:
You are watching all bug changes.
_______________________________________________
Koha-bugs mailing list
Koha-bugs@lists.koha-community.org
http://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/

Reply via email to