summaryrefslogtreecommitdiffstats
path: root/core/lostpassword/templates
diff options
context:
space:
mode:
authorFrank Karlitschek <karlitschek@kde.org>2012-04-26 19:35:33 +0200
committerFrank Karlitschek <karlitschek@kde.org>2012-04-26 19:35:33 +0200
commit6bdefef31e87f6c1be2ed7693fd2f6d203e32462 (patch)
tree18a59be2634f10adfdeec8ff399b5f70ccd48616 /core/lostpassword/templates
parent127796218314c6b1f19ba86f74caa913375aac8d (diff)
downloadnextcloud-server-6bdefef31e87f6c1be2ed7693fd2f6d203e32462.tar.gz
nextcloud-server-6bdefef31e87f6c1be2ed7693fd2f6d203e32462.zip
csrf protection
Diffstat (limited to 'core/lostpassword/templates')
-rw-r--r--core/lostpassword/templates/lostpassword.php1
1 files changed, 1 insertions, 0 deletions
diff --git a/core/lostpassword/templates/lostpassword.php b/core/lostpassword/templates/lostpassword.php
index 4b871963b80..754eabdad67 100644
--- a/core/lostpassword/templates/lostpassword.php
+++ b/core/lostpassword/templates/lostpassword.php
@@ -10,6 +10,7 @@
<p class="infield">
<label for="user" class="infield"><?php echo $l->t( 'Username' ); ?></label>
<input type="text" name="user" id="user" value="" autocomplete="off" required autofocus />
+ <input type="hidden" name="sectoken" id="sectoken" value="<?php echo($_['sectoken']); ?>" />
</p>
<input type="submit" id="submit" value="<?php echo $l->t('Request reset'); ?>" />
<?php endif; ?>