Fixed potential exploit in the change pass page

This commit is contained in:
benjamyn committed 2020-02-26 14:39:18 +11:00
1 parent d521256e21
commit f7b09daf01
2 files changed
+10 -4

No files matched your search

+1 -1
View File
@@ -18,7 +18,7 @@
<td>{% if x[1] == 1 %} Yes {% else %} No {% endif %}</td>
<td align="right">
<form action="/post" method="POST"><input style="width: 70%; display: inline;"
class="form-control" type="text" name="newpass" id="addbox"><button
class="form-control" type="text" name="adminpass" id="addbox"><button
class="btn btn-secondary" type="submit" name="updatepass" value="{{x[2]}}"> Change
Password </button></form>
</td>