OM PR 4212

OpenMage/magento-lts#4212
MahoCommerce · Sep 23, 2024 · 709c065 · 709c065
1 parent dcf9a69
commit 709c065
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/app/code/core/Mage/Customer/controllers/AccountController.php b/app/code/core/Mage/Customer/controllers/AccountController.php
@@ -931,7 +931,7 @@ protected function _validateResetPasswordLinkToken($customerId, $resetPasswordLi
         }
 
         $customerToken = $customer->getRpToken();
-        if (strcmp($customerToken, $resetPasswordLinkToken) != 0 || $customer->isResetPasswordLinkTokenExpired()) {
+        if (is_null($customerToken) || strcmp($customerToken, $resetPasswordLinkToken) !== 0 || $customer->isResetPasswordLinkTokenExpired()) {
             throw Mage::exception('Mage_Core', $this->_getHelper('customer')->__('Your password reset link has expired.'));
         }
     }