76a67cb71a
* Now an array to disable with granularity * Fixed all CSRF tokens back to 1 min * Added CSRF protection for unlock account * Unified error message for all csrf tokens * Fixed a few issues with last commit
22 lines
911 B
Smarty
22 lines
911 B
Smarty
<article class="module width_half">
|
|
<form action="" method="POST">
|
|
<input type="hidden" name="page" value="password">
|
|
<input type="hidden" name="action" value="reset">
|
|
{if $GLOBAL.csrf.enabled && !"passreset"|in_array:$GLOBAL.csrf.disabled_forms}<input type="hidden" name="ctoken" value="{$CTOKEN|escape}" />{/if}
|
|
<header><h3>Password reset</h3></header>
|
|
<div class="module_content">
|
|
<p>If you have an email set for your account, enter your username to get your password reset</p>
|
|
<fieldset>
|
|
<label>Username or E-Mail</label>
|
|
<input type="text" name="username" value="{$smarty.post.username|escape|default:""}" size="22" maxlength="100" required>
|
|
</fieldset>
|
|
<div class="clear"></div>
|
|
</div>
|
|
<footer>
|
|
<div class="submit_link">
|
|
<input type="submit" value="Reset" class="alt_btn">
|
|
</div>
|
|
</footer>
|
|
</form>
|
|
</article>
|