From a901d682fe27adc10454f3bfef82bc121dc54a66 Mon Sep 17 00:00:00 2001
From: Sam <sam.saffron@gmail.com>
Date: Thu, 25 Sep 2014 17:45:45 +1000
Subject: [PATCH] raise not found if user is not found

---
 app/controllers/users_controller.rb | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/app/controllers/users_controller.rb b/app/controllers/users_controller.rb
index 3b2333a2b10..e541b1a000d 100644
--- a/app/controllers/users_controller.rb
+++ b/app/controllers/users_controller.rb
@@ -330,6 +330,9 @@ class UsersController < ApplicationController
     RateLimiter.new(nil, "activate-min-#{request.remote_ip}", 6, 1.minute).performed!
 
     @user = User.find_by_username_or_email(params[:username].to_s)
+
+    raise Discourse::NotFound unless @user
+
     @email_token = @user.email_tokens.unconfirmed.active.first
     enqueue_activation_email if @user
     render nothing: true