return from handlePasswordSubmission when reset link is invalid

steamysips · Apr 22, 2024 · e5115e5 · e5115e5
1 parent 87eceef
commit e5115e5
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/src/controllers/Password.php b/src/controllers/Password.php
@@ -81,7 +81,7 @@ private function handleEmailSubmission(): void
 
     /**
      * Checks if password reset link contains the necessary token and id query parameters.
-     * @return bool
+     * @return bool True if valid
      */
     private function validatePasswordResetLink(): bool
     {
@@ -107,6 +107,7 @@ private function handlePasswordSubmission(): void
     {
         if (!$this->validatePasswordResetLink()) {
             $this->view_data['error'] = 'Invalid password reset link';
+            return;
         }
 
         if (!isset($_POST['pwd'], $_POST['pwd-repeat'])) {