From: Andrew Browning <ayleph@thisshitistemp.com>
Date: Tue, 19 Jul 2016 04:16:48 +0000 (-0400)
Subject: Fix #5462 - attempt to change email without login
X-Git-Url: https://vcs.fsf.org/?a=commitdiff_plain;h=c49e5162ca8e357be38018d045554ccb38f99b10;p=mediagoblin.git

Fix #5462 - attempt to change email without login

Require an active login when accessing the form to change an email
address associated with an account. This prevents a server crash when
a user is assumed to be part of the request.
---

diff --git a/mediagoblin/edit/views.py b/mediagoblin/edit/views.py
index 521359f5..b15fb2e7 100644
--- a/mediagoblin/edit/views.py
+++ b/mediagoblin/edit/views.py
@@ -443,6 +443,7 @@ def verify_email(request):
         user=user.username)
 
 
+@require_active_login
 def change_email(request):
     """ View to change the user's email """
     form = forms.ChangeEmailForm(request.form)