Project

General

Profile

« Previous | Next » 

Revision 1833

Added by Dietmar almost 12 years ago

  1. security fix CRLF injection/HTTP response splitting

View differences:

login.htt
11 11 
	<input type="hidden" name="action" value="login" />
12 12 
	<input type="hidden" name="username_fieldname" value="{USER_FIELDNAME}" />
13 13 
	<input type="hidden" name="password_fieldname" value="{PASSWORD_FIELDNAME}" />
14 
	<input class="none" type="hidden" name="remember" id="remember" value="true" />
14 15 
	<input type="hidden" name="redirect" value="{REDIRECT_URL}" />
15 16 
<h3>{TEXT_LOGIN}</h3>
16 17 
<table>
......
43 44 
<!-- BEGIN show_smart_login_block -->
44 45 
<tr>
45 46 
	<td>&nbsp;</td>
46 
	<td class="input">
47 
		<input type="checkbox" name="remember" id="remember" value="true"/>
48 
		<label for="remember">{TEXT_REMEMBER_ME}</label>
49 
	</td>
47 
	<td>&nbsp;</td>
50 48 
</tr>
51 49 
<!-- END show_smart_login_block -->
52 50 
<tr>
......
56 54 
	<td colspan="2" class="button">
57 55 
	<button type="submit" name="submit" value="submit">{TEXT_LOGIN}</button>
58 56 
	<button type="reset" name="reset" value="reset">{TEXT_RESET}</button>
59 
    <button type="button" value="cancel" onclick="javascript:window.location='{WB_URL}/';" >{TEXT_CANCEL}</button>
57 
    <button type="button" value="cancel" onclick="javascript:window.location='{REDIRECT_URL}/';" >{TEXT_CANCEL}</button>
60 58 
	</td>
61 59 
</tr>
62 60 
<tr>

Also available in: Unified diff