diff options
author | Frank Karlitschek <karlitschek@kde.org> | 2012-04-26 19:35:33 +0200 |
---|---|---|
committer | Frank Karlitschek <karlitschek@kde.org> | 2012-04-26 19:35:33 +0200 |
commit | 6bdefef31e87f6c1be2ed7693fd2f6d203e32462 (patch) | |
tree | 18a59be2634f10adfdeec8ff399b5f70ccd48616 /core/lostpassword/templates | |
parent | 127796218314c6b1f19ba86f74caa913375aac8d (diff) | |
download | nextcloud-server-6bdefef31e87f6c1be2ed7693fd2f6d203e32462.tar.gz nextcloud-server-6bdefef31e87f6c1be2ed7693fd2f6d203e32462.zip |
csrf protection
Diffstat (limited to 'core/lostpassword/templates')
-rw-r--r-- | core/lostpassword/templates/lostpassword.php | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/core/lostpassword/templates/lostpassword.php b/core/lostpassword/templates/lostpassword.php index 4b871963b80..754eabdad67 100644 --- a/core/lostpassword/templates/lostpassword.php +++ b/core/lostpassword/templates/lostpassword.php @@ -10,6 +10,7 @@ <p class="infield"> <label for="user" class="infield"><?php echo $l->t( 'Username' ); ?></label> <input type="text" name="user" id="user" value="" autocomplete="off" required autofocus /> + <input type="hidden" name="sectoken" id="sectoken" value="<?php echo($_['sectoken']); ?>" /> </p> <input type="submit" id="submit" value="<?php echo $l->t('Request reset'); ?>" /> <?php endif; ?> |