wait on check email for send password reset email to prevent misuse to find out which emails on server exist

This commit is contained in:
einhornimmond 2021-06-10 15:26:39 +02:00
parent 34162de1ed
commit a2261f08d0

View File

@ -99,7 +99,7 @@ Poco::JSON::Object* JsonSendEmail::handle(Poco::Dynamic::Var params)
return stateError("invalid session");
}
}
Poco::Thread::sleep(ServerConfig::g_FakeLoginSleepTime);
auto receiver_user = controller::User::create();
if (1 != receiver_user->load(email)) {
return stateError("invalid email");