MDL-63183 login: Add hidden login token input in guest login forms

* Affected forms:
  - login/index_form.html
  - auth/shibboleth/index_form.html
This commit is contained in:
Jun Pataleta
2018-10-24 11:27:52 +08:00
committed by Damyon Wiese
parent 52b50073fc
commit 41790d2e48
2 changed files with 3 additions and 1 deletions
+1
View File
@@ -54,6 +54,7 @@ if ($show_instructions) {
</div>
<form action="../../login/index.php" method="post" id="guestlogin">
<div class="guestform">
<input type="hidden" name="logintoken" value="<?php echo s(\core\session\manager::get_login_token()); ?>" />
<input type="hidden" name="username" value="guest" />
<input type="hidden" name="password" value="guest" />
<input type="submit" value="<?php print_string("loginguest") ?>" />
+2 -1
View File
@@ -74,9 +74,10 @@ if (empty($CFG->authloginviaemail)) {
</div>
<form action="index.php" method="post" id="guestlogin">
<div class="guestform">
<input type="hidden" name="logintoken" value="<?php echo s(\core\session\manager::get_login_token()); ?>" />
<input type="hidden" name="username" value="guest" />
<input type="hidden" name="password" value="guest" />
<input type="submit" value="<?php print_string("loginguest") ?>" />
<input type="submit" value="<?php print_string("loginguest"); ?>" />
</div>
</form>
</div>