Fixed potential exploit in the change pass page
This commit is contained in:
1 parent
d521256e21
commit
f7b09daf01
2 files changed
+10
-4
No files matched your search
@@ -18,7 +18,7 @@
|
||||
<td>{% if x[1] == 1 %} Yes {% else %} No {% endif %}</td>
|
||||
<td align="right">
|
||||
<form action="/post" method="POST"><input style="width: 70%; display: inline;"
|
||||
class="form-control" type="text" name="newpass" id="addbox"><button
|
||||
class="form-control" type="text" name="adminpass" id="addbox"><button
|
||||
class="btn btn-secondary" type="submit" name="updatepass" value="{{x[2]}}"> Change
|
||||
Password </button></form>
|
||||
</td>
|
||||
|
||||
Reference in new issue
Block a user