1 files changed, 4 insertions, 0 deletions
diff --git a/token.cgi b/token.cgi
index c43acdbfd..048670a1c 100755
--- a/token.cgi
+++ b/token.cgi
@@ -298,6 +298,8 @@ sub cancelChangeEmail {
 sub request_create_account {
     my ($date, $login_name, $token) = @_;
 
+    Bugzilla->user->check_account_creation_enabled;
+
     $vars->{'token'} = $token;
     $vars->{'email'} = $login_name . Bugzilla->params->{'emailsuffix'};
     $vars->{'expiration_ts'} = ctime(str2time($date) + MAX_TOKEN_AGE * 86400);
@@ -310,6 +312,8 @@ sub request_create_account {
 sub confirm_create_account {
     my ($login_name, $token) = @_;
 
+    Bugzilla->user->check_account_creation_enabled;
+
     my $password = $cgi->param('passwd1') || '';
     validate_password($password, $cgi->param('passwd2') || '');
     # Make sure that these never show up anywhere in the UI.