diff --git a/public/main/auth/lostPassword.php b/public/main/auth/lostPassword.php index 9419c599eb..c1cb2f4d1a 100644 --- a/public/main/auth/lostPassword.php +++ b/public/main/auth/lostPassword.php @@ -25,6 +25,11 @@ if ('false' === api_get_setting('allow_lostpassword')) { api_not_allowed(true); } +if (!api_is_anonymous()) { + header('Location: '.api_get_path(WEB_PATH)); + exit; +} + $reset = $_REQUEST['reset'] ?? ''; $userId = $_REQUEST['id'] ?? '';