Merge pull request #404 from CWSpear/patch-1

Make sure `password_confirmation` is being removed
Zizaco · Sep 10, 2014 · bdfbcff · bdfbcff
2 parents 594fd79 + 1ee432a
commit bdfbcff
Showing 1 changed file with 2 additions and 3 deletions.
diff --git a/src/Confide/UserValidator.php b/src/Confide/UserValidator.php
@@ -90,9 +90,6 @@ public function validatePassword(ConfideUserInterface $user)
 
                 // Hashes password and unset password_confirmation field
                 $user->password = $hash->make($user->password);
-                unset($user->password_confirmation);
-
-                return true;
             } else {
                 $this->attachErrorMsg(
                     $user,
@@ -102,6 +99,8 @@ public function validatePassword(ConfideUserInterface $user)
                 return false;
             }
         }
+
+        unset($user->password_confirmation);
 
         return true;
     }