Changeset

13844:bb15cbb856a1

Merge 13.0->trunk
author Matthew Wild <mwild1@gmail.com>
date Thu, 10 Apr 2025 16:07:54 +0100
parents 13842:31fa834108bc (current diff) 13843:87dd8639f08f (diff)
children 13846:14a4c0d774f2
files
diffstat 1 files changed, 14 insertions(+), 2 deletions(-) [+]
line wrap: on
line diff
--- a/plugins/mod_invites_register.lua	Thu Apr 10 11:33:47 2025 +0100
+++ b/plugins/mod_invites_register.lua	Thu Apr 10 16:07:54 2025 +0100
@@ -101,8 +101,20 @@
 		-- for this module to do...
 		return;
 	end
-	if validated_invite and validated_invite.additional_data and validated_invite.additional_data.allow_reset then
-		event.allow_reset = validated_invite.additional_data.allow_reset;
+	if validated_invite then
+		local username = validated_invite.username;
+		if username and username ~= event.username then
+			event.allowed = false;
+			event.reason = "The chosen username is not valid with this invitation";
+		end
+		local reset_username = validated_invite.additional_data and validated_invite.additional_data.allow_reset;
+		if reset_username then
+			if reset_username ~= event.username then
+				event.allowed = false;
+				event.reason = "Incorrect username for password reset";
+			end
+			event.allow_reset = reset_username;
+		end
 	end
 end);