Added cross-scripting field to auth form.

This commit is contained in:
simon 2017-07-23 20:20:06 +01:00
parent a6f748b49f
commit 32f2695b76

View file

@ -1,27 +1,28 @@
{% extends "templates/base.html" %} {% extends "templates/base.html" %}
{% block content %} {% block content %}
<div id="content" class="auth"> <div id="content" class="auth">
<form action="{{servlet-context}}/auth" method="POST"> <form action="{{servlet-context}}/auth" method="POST">
<input type="hidden" name="redirect-to" value="{{redirect-to}}"/> {% csrf-field %}
{% if user %} <input type="hidden" name="redirect-to" value="{{redirect-to}}"/>
<p class="widget"> {% if user %}
<label for="submit">{{config.save-prompt}}</label> <p class="widget">
<input name="action" id="action" type="submit" class="action-dangerous" value="{{config.logout-label}}"/> <label for="submit">{{config.save-prompt}}</label>
</p> <input name="action" id="action" type="submit" class="action-dangerous" value="{{config.logout-label}}"/>
{% else %} </p>
<p class="widget"> {% else %}
<label for="username">{{config.your-uname-prompt}}</label> <p class="widget">
<input name="username" id="username" type="text" required/> <label for="username">{{config.your-uname-prompt}}</label>
</p> <input name="username" id="username" type="text" required/>
<p class="widget"> </p>
<label for="password">{{config.old-pass-prompt}}</label> <p class="widget">
<input name="password" id="password" type="password" required/> <label for="password">{{config.old-pass-prompt}}</label>
</p> <input name="password" id="password" type="password" required/>
<p class="widget"> </p>
<label for="submit">{{config.login-prompt}}</label> <p class="widget">
<input name="action" id="action" type="submit" class="action" value="{{config.login-label}}"/> <label for="submit">{{config.login-prompt}}</label>
</p> <input name="action" id="action" type="submit" class="action" value="{{config.login-label}}"/>
{% endif %} </p>
</form> {% endif %}
</form>
</div> </div>
{% endblock %} {% endblock %}