derpibooru / philomena

Next-generation imageboard
https://derpibooru.org/
GNU Affero General Public License v3.0
218 stars 58 forks source link

Cannot reset password if on banned IP/FP #259

Closed TheSmilingPony closed 2 years ago

TheSmilingPony commented 2 years ago

Describe the bug If you're on a banned IP or FP, you cannot request a password reset; user is told they're banned on clicking the link on the login page.

To Reproduce Steps to reproduce the behavior:

  1. Ban your IP
  2. Log out
  3. On login page, hit "Forgot your password"
  4. Observe "You're banned" message

Expected behavior Can request a password reset on banned IP/FP, as otherwise this can invalidate the intended logged-in IP/FP ban circumvention.