3006cb544f
The way this now works is, if csrf is enabled: * Any new or existing template can have csrf protection by adding the hidden input ctoken that's in this batch to its form, removes any logic in templates * Page controllers that already exist have been updated, new ones only require checking if csrf is enabled and valid
22 lines
839 B
Smarty
22 lines
839 B
Smarty
<article class="module width_half">
|
|
<form action="" method="POST">
|
|
<input type="hidden" name="page" value="password">
|
|
<input type="hidden" name="action" value="reset">
|
|
<input type="hidden" name="ctoken" value="{$CTOKEN|escape|default:""}" />
|
|
<header><h3>Password reset</h3></header>
|
|
<div class="module_content">
|
|
<p>If you have an email set for your account, enter your username to get your password reset</p>
|
|
<fieldset>
|
|
<label>Username or E-Mail</label>
|
|
<input type="text" name="username" value="{$smarty.post.username|escape|default:""}" size="22" maxlength="100" required>
|
|
</fieldset>
|
|
<div class="clear"></div>
|
|
</div>
|
|
<footer>
|
|
<div class="submit_link">
|
|
<input type="submit" value="Reset" class="alt_btn">
|
|
</div>
|
|
</footer>
|
|
</form>
|
|
</article>
|