skeleton for completing reset procedure

data/datamysql/passwordreset.go

@@ -113,13 +113,18 @@ func (c *passwordResetRepo) SetTokenOpened(token string) error {
 	const (
 		query = `UPDATE		tab_password_reset   a
 				 SET		a.opened	=   1,
-				 WHERE  	a.token     = ? AND a.used = 0`
+				 WHERE  	a.token     = ? AND a.used = 0 AND a.expire_date < CURRENT_TIMESTAMP`
 	)
 
-	if _, err := c.conn.Exec(query, token); err != nil {
+	result, err := c.conn.Exec(query, token)
+	if err != nil {
 		return err
 	}
 
+	if updateCount, err := result.RowsAffected(); err != nil || updateCount == 0 {
+		return fmt.Errorf("Invalid token")
+	}
+
 	return nil
 }