diff --git a/controllers/user.go b/controllers/user.go
index 8c273810..da154343 100644
--- a/controllers/user.go
+++ b/controllers/user.go
@@ -478,7 +478,7 @@ func (c *ApiController) SetPassword() {
 				return
 			}
 		}
-	} else {
+	} else if code == "" {
 		msg := object.CheckPassword(targetUser, oldPassword, c.GetAcceptLanguage())
 		if msg != "" {
 			c.ResponseError(msg)