fixed bug #5225, fix provided by hachiman

diff --git a/login/forgot_password.php b/login/forgot_password.php
index 835677db5bffd700ca8a6b2fb1d728779cb3e974..8f540b9ccc7eabeb679d33d2753f2bcf6c3dd4db 100644 (file)
--- a/login/forgot_password.php
+++ b/login/forgot_password.php
@@ -170,7 +170,7 @@ if ($param->action=='find' and confirm_sesskey()) {
 if (!empty($param->p) and !empty($param->s)) {
 
     update_login_count();
-    $user = get_complete_user_data('username',$s);
+    $user = get_complete_user_data('username',$param->s);
 
     // make sure that url relates to a valid user
     if (!empty($user)) {