8756036646
added csrf protection to workers under sitewide config added csrf protection to notifications under sitewide config added csrf protection to invitations under sitewide config cleaned up login page csrf cleaned up contactform/contactform page cleaned up register/register page moved config->csrf->forms->register to sitewide added login ip/user/time to notification on login
47 lines
1.7 KiB
Smarty
47 lines
1.7 KiB
Smarty
<form action="{$smarty.server.SCRIPT_NAME}" method="POST">
|
|
<input type="hidden" name="page" value="{$smarty.request.page|escape}">
|
|
<input type="hidden" name="action" value="{$smarty.request.action|escape}">
|
|
<input type="hidden" name="do" value="sendInvitation">
|
|
{if $GLOBAL.csrf.enabled && $GLOBAL.csrf.options.sitewide}<input type="hidden" name="ctoken" value="{$CTOKEN|escape}" />{/if}
|
|
<article class="module width_quarter">
|
|
<header><h3>Invitation</h3></header>
|
|
<div class="module_content">
|
|
<fieldset>
|
|
<label>E-Mail</label>
|
|
<input type="text" name="data[email]" value="{$smarty.request.data.email|escape|default:""}" size="30" />
|
|
</fieldset>
|
|
<fieldset>
|
|
<label>Message</label>
|
|
<textarea name="data[message]" rows="5">{$smarty.request.data.message|escape|default:"Please accept my invitation to this awesome pool."}</textarea>
|
|
</fieldset>
|
|
</div>
|
|
<footer>
|
|
<div class="submit_link">
|
|
<input type="submit" value="Invite" class="alt_btn">
|
|
</div>
|
|
</footer>
|
|
</article>
|
|
</form>
|
|
|
|
<article class="module width_3_quarter">
|
|
<header><h3>Past Invitations</h3></header>
|
|
<table class="tablesorter" cellspacing="0">
|
|
<thead style="font-size:13px;">
|
|
<tr>
|
|
<th>E-Mail</th>
|
|
<th align="center">Sent</th>
|
|
<th align="center">Activated</th>
|
|
</tr>
|
|
</thead>
|
|
<tbody>
|
|
{section name=invite loop=$INVITATIONS}
|
|
<tr>
|
|
<td>{$INVITATIONS[invite].email}</td>
|
|
<td align="center">{$INVITATIONS[invite].time|date_format:"%d/%m/%Y %H:%M:%S"}</td>
|
|
<td align="center"><i class="icon-{if $INVITATIONS[invite].is_activated}ok{else}cancel{/if}"></i></td>
|
|
</tr>
|
|
{/section}
|
|
<tbody>
|
|
</table>
|
|
</article>
|