Skip to content

Commit 8577847

Browse files
committed
fix: password reset null check
1 parent 2ac6c72 commit 8577847

1 file changed

Lines changed: 4 additions & 0 deletions

File tree

frontend/express/libs/members.js

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -761,6 +761,10 @@ membersUtility.reset = function(req, callback) {
761761
var secret = membersUtility.countlyConfig.passwordSecret || "";
762762
argon2Hash(req.body.password + secret).then(password => {
763763
membersUtility.db.collection('password_reset').findOne({ prid: req.body.prid }, function(err, passwordReset) {
764+
if (err || !passwordReset || !passwordReset.user_id) {
765+
callback(false, undefined);
766+
return;
767+
}
764768
membersUtility.db.collection('members').findAndModify({ _id: passwordReset.user_id }, {}, { '$set': { "password": password } }, function(err2, member) {
765769
member = member && member.ok ? member.value : null;
766770
killOtherSessionsForUser(passwordReset.user_id + "", null, null, membersUtility.db);

0 commit comments

Comments
 (0)