MDL-63183 auth_shibboleth: Add hidden login token in guest login form

2018-11-07 00:17:48 +01:00
parent 8f3b93f686
commit daf0893181
1 changed files with 1 additions and 0 deletions
@@ -54,6 +54,7 @@ if ($show_instructions) {
        </div>
        <form action="../../login/index.php" method="post" id="guestlogin">
          <div class="guestform">
+            <input type="hidden" name="logintoken" value="<?php echo s(\core\session\manager::get_login_token()); ?>" />
            <input type="hidden" name="username" value="guest" />
            <input type="hidden" name="password" value="guest" />
            <input type="submit" value="<?php print_string("loginguest") ?>" />