From db029882ec00e7b0627e951e087c82eb4906b5b4 Mon Sep 17 00:00:00 2001 From: Raphael Michel Date: Tue, 1 Jun 2021 15:30:07 +0200 Subject: [PATCH] Fix case-sensitive email handling in password recovery --- src/pretix/presale/forms/customer.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/pretix/presale/forms/customer.py b/src/pretix/presale/forms/customer.py index e80ded8a8..469149c8f 100644 --- a/src/pretix/presale/forms/customer.py +++ b/src/pretix/presale/forms/customer.py @@ -283,7 +283,7 @@ class ResetPasswordForm(forms.Form): if 'email' not in self.cleaned_data: return try: - self.customer = self.request.organizer.customers.get(email=self.cleaned_data['email']) + self.customer = self.request.organizer.customers.get(email=self.cleaned_data['email'].lower()) return self.customer.email except Customer.DoesNotExist: # Yup, this is an information leak. But it prevents dozens of support requests – and even if we didn't