title: Checking if User is activated before sending Password Reset email using Forgot Password
body: <p>I'm creating a small app using <code>Laravel 5.3</code>. I've applied user activation (via email confirmation) on Laravel's default <code>Auth</code>. But i couldn't find a way to stop sending password reset link if account/user not activated by verifying email address. Currently if a user creates an account and doesn't verify the email address he/she can login using Password Reset link.</p>
  
  <p>this what i've in user table</p>
  
  <pre><code>public function up()
  {
      Schema::create('users', function (Blueprint $table) {
          $table-&gt;increments('id');
          $table-&gt;string('name')-&gt;nullable();;
          $table-&gt;string('username')-&gt;unique();
          $table-&gt;string('email')-&gt;unique();
          $table-&gt;string('company')-&gt;nullable();;
          $table-&gt;string('password');
          $table-&gt;boolean('activated')-&gt;default(false);
          $table-&gt;rememberToken();
          $table-&gt;timestamps();
      });
  
      Schema::create('user_activations', function (Blueprint $table) {
          $table-&gt;integer('user_id')-&gt;unsigned();
          $table-&gt;string('token')-&gt;index();
          $table-&gt;timestamp('created_at');
      });
  }
  </code></pre>
  
  <p><strong>UPDATE</strong>
  I tried to do it by updating the below function. but it's not working</p>
  
  <pre><code>public function reset(Request $request)
  {
      if (!$request-&gt;activated) {
          return redirect('/');
      } else {
          $this-&gt;validate($request, $this-&gt;rules(), $this-&gt;validationErrorMessages());
  
          $response = $this-&gt;broker()-&gt;reset(
              $this-&gt;credentials($request), function ($user, $password) {
                  $this-&gt;resetPassword($user, $password);
              }
          );
  
          return $response == Password::PASSWORD_RESET
                      ? $this-&gt;sendResetResponse($response)
                      : $this-&gt;sendResetFailedResponse($request, $response);
      }
  }
  </code></pre>