Version 4.2.0

applications/core/modules/front/system/lostpass.php

@@ -1,12 +1,11 @@
 <?php
 /**
  * @brief		Lost Password
- * @author		<a href='http://www.invisionpower.com'>Invision Power Services, Inc.</a>
- * @copyright	(c) 2001 - 2016 Invision Power Services, Inc.
- * @license		http://www.invisionpower.com/legal/standards/
- * @package		IPS Community Suite
+ * @author		<a href='https://www.invisioncommunity.com'>Invision Power Services, Inc.</a>
+ * @copyright	(c) Invision Power Services, Inc.
+ * @license		https://www.invisioncommunity.com/legal/standards/
+ * @package		Invision Community
  * @since		26 Aug 2013
- * @version		SVN_VERSION_NUMBER
  */
 
 namespace IPS\core\modules\front\system;
@@ -147,11 +146,15 @@ class _lostpass extends \IPS\Dispatcher\Controller
 				catch( \BadMethodCallException $e ){}
 			}
 			
+			/* Log in, and invalidate all other sessions */
+			\IPS\Session::i()->setMember( $member );
+			$member->invalidateSessionsAndLogins( \IPS\Session::i()->id );
+			\IPS\Member\Device::loadOrCreate( $member )->updateAfterAuthentication( isset( \IPS\Request::i()->cookie['login_key'] ), '' );
+			
 			/* Delete validating record and log in */
 			\IPS\Db::i()->delete( 'core_validating', array( 'member_id=? AND lost_pass=1', $member->member_id ) );
 			
-			/* Log in and redirect */
-			\IPS\Session::i()->setMember( $member );
+			/* Redirect */
 			\IPS\Output::i()->redirect( \IPS\Http\Url::internal( '' ) );
 		}