bug 1138: Don't include not yet verified email addresses
authorMichael Tänzer <neo@nhng.de>
Sun, 6 Apr 2014 23:20:50 +0000 (01:20 +0200)
committerMichael Tänzer <neo@nhng.de>
Sun, 6 Apr 2014 23:20:50 +0000 (01:20 +0200)
Signed-off-by: Michael Tänzer <neo@nhng.de>
includes/notary.inc.php

index 83f33e7..0be8303 100644 (file)
@@ -1322,7 +1322,7 @@ function get_email_address($userid, $primary,$deleted=0){
        if ($primary) {
                $filter= $filter." and `email`!='".mysql_real_escape_string($primary)."'";
        }
-       $query = "select * from `email` where `memid`='".$userid."'".$filter." order by `created`";
+       $query = "select * from `email` where `memid`='".$userid."' and `hash`='' ".$filter." order by `created`";
        return mysql_query($query);
 }