From 49a88f6634163f6b271b95c2de01a870d51c5985 Mon Sep 17 00:00:00 2001
From: Joshua Ryder <ryderjj89@outlook.com>
Date: Mon, 6 Oct 2025 18:43:38 -0400
Subject: [PATCH] SSPR fix

---
 server/utils/database.ts | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/server/utils/database.ts b/server/utils/database.ts
index e0da0d7..035ad85 100644
--- a/server/utils/database.ts
+++ b/server/utils/database.ts
@@ -203,7 +203,8 @@ export function resetPasswordByEmail(email: string, newPassword: string) {
   const db = getDatabase()
   const saltRounds = 10
   const hashedPassword = bcrypt.hashSync(newPassword, saltRounds)
-  return db.prepare('UPDATE users SET password = ? WHERE email = ?').run(hashedPassword, email)
+  const result = db.prepare('UPDATE users SET password = ? WHERE LOWER(email) = LOWER(?)').run(hashedPassword, email)
+  return result
 }
 
 export function getAllUsers() {