3006cb544f
The way this now works is, if csrf is enabled: * Any new or existing template can have csrf protection by adding the hidden input ctoken that's in this batch to its form, removes any logic in templates * Page controllers that already exist have been updated, new ones only require checking if csrf is enabled and valid
8 lines
473 B
Smarty
8 lines
473 B
Smarty
<form action="" method="POST">
|
|
<input type="hidden" name="page" value="password">
|
|
<input type="hidden" name="action" value="reset">
|
|
<input type="hidden" name="ctoken" value="{$CTOKEN|escape|default:""}" />
|
|
<p>If you have an email set for your account, enter your username to get your password reset</p>
|
|
<p><input type="text" value="{$smarty.post.username|escape|default:""}" name="username" required><input class="submit small" type="submit" value="Reset"></p>
|
|
</form>
|