fixed change pw templates; added csrf token added csrf protection for password reset fixed reset and change pass templates; were missing csrf token (form only tpl)
8 lines
525 B
Smarty
8 lines
525 B
Smarty
<form action="" method="POST">
|
|
<input type="hidden" name="page" value="password">
|
|
<input type="hidden" name="action" value="reset">
|
|
{if $GLOBAL.csrf.enabled && $GLOBAL.csrf.options.sitewide}<input type="hidden" name="ctoken" value="{$CTOKEN|escape}" />{/if}
|
|
<p>If you have an email set for your account, enter your username to get your password reset</p>
|
|
<p><input type="text" value="{$smarty.post.username|escape|default:""}" name="username" required><input class="submit small" type="submit" value="Reset"></p>
|
|
</form>
|