diff --git a/ProjectLighthouse/Pages/CompleteEmailVerificationPage.cshtml.cs b/ProjectLighthouse/Pages/CompleteEmailVerificationPage.cshtml.cs index 8552b7ba..6be84c7b 100644 --- a/ProjectLighthouse/Pages/CompleteEmailVerificationPage.cshtml.cs +++ b/ProjectLighthouse/Pages/CompleteEmailVerificationPage.cshtml.cs @@ -28,6 +28,12 @@ public class CompleteEmailVerificationPage : BaseLayout return this.Page(); } + if (emailVerifyToken.UserId != user.UserId) + { + this.Error = "This token doesn't belong to you!"; + return this.Page(); + } + this.Database.EmailVerificationTokens.Remove(emailVerifyToken); user.EmailAddressVerified = true;