76a67cb71a
* Now an array to disable with granularity * Fixed all CSRF tokens back to 1 min * Added CSRF protection for unlock account * Unified error message for all csrf tokens * Fixed a few issues with last commit
8 lines
545 B
Smarty
8 lines
545 B
Smarty
<form action="" method="POST">
|
|
<input type="hidden" name="page" value="password">
|
|
<input type="hidden" name="action" value="reset">
|
|
{if $GLOBAL.csrf.enabled && !"passreset"|in_array:$GLOBAL.csrf.disabled_forms}<input type="hidden" name="ctoken" value="{$CTOKEN|escape}" />{/if}
|
|
<p>If you have an email set for your account, enter your username to get your password reset</p>
|
|
<p><input type="text" value="{$smarty.post.username|escape|default:""}" name="username" required><input class="submit small" type="submit" value="Reset"></p>
|
|
</form>
|