MDL-68178 auth: CSRF protection for the resend confirmation email form

Credit to Chandra Kishor.
2020-07-20 12:31:06 +08:00
parent 4a6de87cae
commit 4a2a779e12
1 changed files with 2 additions and 1 deletions
@@ -198,7 +198,8 @@ if ($frm and isset($frm->username)) {                             // Login WITH
                [
                    'username' => $frm->username,
                    'password' => $frm->password,
-                    'resendconfirmemail' => true
+                    'resendconfirmemail' => true,
+                    'logintoken' => \core\session\manager::get_login_token()
                ]
            );
            echo $OUTPUT->single_button($resendconfirmurl, get_string('emailconfirmationresend'));