3006cb544f
The way this now works is, if csrf is enabled: * Any new or existing template can have csrf protection by adding the hidden input ctoken that's in this batch to its form, removes any logic in templates * Page controllers that already exist have been updated, new ones only require checking if csrf is enabled and valid
31 lines
1.7 KiB
Smarty
31 lines
1.7 KiB
Smarty
<form action="{$smarty.server.SCRIPT_NAME}" method="post">
|
|
<input type="hidden" name="page" value="{$smarty.request.page|escape}">
|
|
<input type="hidden" name="action" value="contactform">
|
|
<input type="hidden" name="ctoken" value="{$CTOKEN|escape|default:""}" />
|
|
<article class="module width_3_quarter">
|
|
<header><h3>Contact Us</h3></header>
|
|
<div class="module_content">
|
|
<fieldset>
|
|
<label for="senderName">Your Name</label>
|
|
<input type="text" class="text tiny" name="senderName" value="{$smarty.request.senderName|escape|default:""}" placeholder="Please type your name" size="15" maxlength="100" required />
|
|
</fieldset>
|
|
<fieldset>
|
|
<label for="senderEmail">Your Email Address</label>
|
|
<input type="text" class="text tiny" name="senderEmail" value="{$smarty.request.senderEmail|escape|default:""}" placeholder="Please type your email" size="50" maxlength="100" required />
|
|
</fieldset>
|
|
<fieldset>
|
|
<label for="senderEmail">Your Subject</label>
|
|
<input type="text" class="text tiny" name="senderSubject" value="{$smarty.request.senderSubject|escape|default:""}" placeholder="Please type your subject" size="15" maxlength="100" required />
|
|
</fieldset>
|
|
<fieldset>
|
|
<label for="message">Your Message</label>
|
|
<textarea type="text" name="senderMessage" cols="80" rows="10" maxlength="10000" required>{$smarty.request.senderMessage|escape|default:""}</textarea>
|
|
</fieldset>
|
|
<center>{nocache}{$RECAPTCHA|default:""}{/nocache}</center>
|
|
</div>
|
|
<footer>
|
|
<div class="submit_link"><input type="submit" class="alt_btn" name="sendMessage" value="Send Email" /></div>
|
|
</footer>
|
|
</article>
|
|
</form>
|