* Now an array to disable with granularity * Fixed all CSRF tokens back to 1 min * Added CSRF protection for unlock account * Unified error message for all csrf tokens * Fixed a few issues with last commit
10 lines
908 B
Smarty
10 lines
908 B
Smarty
<form action="{$smarty.server.SCRIPT_NAME}?page=login" method="post" id="loginForm" data-ajax="false">
|
|
<input type="hidden" name="to" value="{($smarty.request.to|default:"{$smarty.server.SCRIPT_NAME}?page=dashboard")|escape}" />
|
|
{if $GLOBAL.csrf.enabled && !"login"|in_array:$GLOBAL.csrf.disabled_forms}<input type="hidden" name="ctoken" value="{$CTOKEN|escape}" />{/if}
|
|
<p><label for="userForm">Email</label><input type="text" name="username" value="" id="userForm"></p>
|
|
<p><label for="passForm">Password</label><input type="password" name="password" value="" id="passForm"></p>
|
|
<center>{nocache}{$RECAPTCHA|default:"" nofilter}{/nocache}</center>
|
|
<center><p><input type="submit" value="Login"></p></center>
|
|
</form>
|
|
<center><p><a href="{$smarty.server.SCRIPT_NAME}?page=password"><font size="1">Forgot your password?</font></a></p></center>
|