Fix wording

Changed forgot-password so that it does not expose to the user that the email address does not exist.
This commit is contained in:
Rebecca Law
2016-01-11 12:23:08 +00:00
parent 677f8891b2
commit f7373ee5fc
5 changed files with 14 additions and 23 deletions
+1 -1
View File
@@ -10,7 +10,7 @@ from app.main.views import send_sms_code, check_token
def new_password(token):
email_address = check_token(token)
if not email_address:
flash('The token we sent you has expired. Enter your email address to try again.')
flash('The link in the email we sent you has expired. Enter your email address to resend.')
return redirect(url_for('.forgot_password'))
user = users_dao.get_user_by_email(email_address=email_address.decode('utf-8'))