Merge pull request #1986 from TahsinAbrar/develop

on forget password, show error message if user not found with email
This commit is contained in:
snipe
2016-05-20 13:51:39 -07:00
+1
View File
@@ -332,6 +332,7 @@ class AuthController extends BaseController
}
} catch (Cartalyst\Sentry\Users\UserNotFoundException $e) {
return Redirect::route('forgot-password')->withInput()->with('error', $e->getMessage());
// Even though the username was not found, we will pretend
// we have sent the password reset code through username,
// this is a security measure against hackers.