From: Hypolite Petovan <hypolite@mrpetovan.com>
Date: Sat, 12 Nov 2022 14:58:58 +0000 (-0500)
Subject: Don't send password reset emails to deleted user accounts
X-Git-Url: https://git.mxchange.org/?a=commitdiff_plain;h=2d0af812b1a81c788182e76fff0c59e7aa6554b8;p=friendica.git

Don't send password reset emails to deleted user accounts
---

diff --git a/mod/lostpass.php b/mod/lostpass.php
index 62b621b8ce..f840f2fb62 100644
--- a/mod/lostpass.php
+++ b/mod/lostpass.php
@@ -34,7 +34,7 @@ function lostpass_post(App $a)
 		DI::baseUrl()->redirect();
 	}
 
-	$condition = ['(`email` = ? OR `nickname` = ?) AND `verified` = 1 AND `blocked` = 0', $loginame, $loginame];
+	$condition = ['(`email` = ? OR `nickname` = ?) AND `verified` = 1 AND `blocked` = 0 AND `account_removed` = 0 AND `account_expired` = 0', $loginame, $loginame];
 	$user = DBA::selectFirst('user', ['uid', 'username', 'nickname', 'email', 'language'], $condition);
 	if (!DBA::isResult($user)) {
 		DI::sysmsg()->addNotice(DI::l10n()->t('No valid account found.'));