Fixes bug where a user was given a false positive that their old veri…

…fication token worked.
ajmueller · Aug 9, 2016 · fea252e · fea252e
1 parent aefb775
commit fea252e
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/controllers/user.js b/controllers/user.js
@@ -288,6 +288,11 @@ exports.verify = {
 				return res.redirect('/');
 			}
 
+			if (!user) {
+				req.flash('errors', { msg: 'Your verification token is invalid.  Please enter your email address below to receive a new verification token.' });
+				return res.redirect('/user/verify-resend');
+			}
+
 			req.flash('success', { msg: 'Your email address has been verified.  You may now log in.' });
 			res.redirect('/user/login');
 		});