[WIP] Add csrfProtect()

2025-10-14 09:44:55 +02:00 · 2025-09-14 20:47:28 +02:00
parent 413ad42afa
commit 849944ff20
13 changed files with 30 additions and 0 deletions
--- a/system/templates/account/lost/check-code.finish.html.twig
+++ b/system/templates/account/lost/check-code.finish.html.twig
@@ -1,5 +1,8 @@
 Please enter new password to your account and repeat to make sure you remember password.<BR>
 <form action="{{ getLink('account/lost/email/set-new-password') }}" method="post">
+
+	{{ csrf() }}
+
 	<input type="hidden" name="character" value="{{ character }}">
 	<input type="hidden" name="code" value="{{ code }}">
 	<table class="myaac-table" style="width: 100%;">