From 1b4249ecd7b2051abd6b902675326e670c6e6f1d Mon Sep 17 00:00:00 2001 From: SleepWalker Date: Sun, 22 May 2016 22:04:52 +0300 Subject: [PATCH] #100: password protection for email change form --- api/controllers/AccountsController.php | 1 + 1 file changed, 1 insertion(+) diff --git a/api/controllers/AccountsController.php b/api/controllers/AccountsController.php index 71ef948..3d611eb 100644 --- a/api/controllers/AccountsController.php +++ b/api/controllers/AccountsController.php @@ -111,6 +111,7 @@ class AccountsController extends Controller { /** @var Account $account */ $account = Yii::$app->user->identity; $model = new InitStateForm($account); + $model->load(Yii::$app->request->post()); if (!$model->sendCurrentEmailConfirmation()) { return [ 'success' => false,