[BUGFIX] Add urldecode for the forgotHash in FrontendLoginController 54/46454/5
authorZsolt Molnar <zsolt.molnar@arxia.com>
Wed, 3 Feb 2016 10:48:26 +0000 (12:48 +0200)
committerJan Helke <typo3@helke.de>
Sun, 6 Mar 2016 12:55:14 +0000 (13:55 +0100)
Resolves: #73060
Releases: master, 7.6
Change-Id: Iffb0db26b591b26ed4c2bf78aa50c8bf1addec2b
Reviewed-on: https://review.typo3.org/46454
Reviewed-by: Jan Helke <typo3@helke.de>
Tested-by: Jan Helke <typo3@helke.de>
typo3/sysext/felogin/Classes/Controller/FrontendLoginController.php

index 395f855..be1ee44 100644 (file)
@@ -301,7 +301,7 @@ class FrontendLoginController extends \TYPO3\CMS\Frontend\Plugin\AbstractPlugin
         $markerArray['###BACKLINK_LOGIN###'] = '';
         $uid = $this->piVars['user'];
         $piHash = $this->piVars['forgothash'];
-        $hash = explode('|', $piHash);
+        $hash = explode('|', rawurldecode($piHash));
         if ((int)$uid === 0) {
             $markerArray['###STATUS_MESSAGE###'] = $this->getDisplayText(
                 'change_password_notvalid_message',