login: strip logout parameter on form post

[minimedit.git] / login / form.inc.php

diff --git a/login/form.inc.php b/login/form.inc.php
index 9c2a604448b9c52e11a147ad175f9ca7af7cce51..c3913fbd319ca501ff927a30ccd279bc9d152db9 100644 (file)
--- a/login/form.inc.php
+++ b/login/form.inc.php
@@ -1,9 +1,22 @@
 <h2>Inloggen</h2>
 
-<form action="" method="post">
+<form action="?" method="post">
        <input id="login" name="login" placeholder="Gebruikersnaam" value="<?php
-               if (isset($_POST['login'])) print htmlspecialchars($_REQUEST['login']);
+               if (isset($_POST['login'])) print htmlspecialchars($_POST['login']);
        ?>" />
        <input id="pass" name="pass" type="password" value="" placeholder="Wachtwoord" />
        <input type="submit" value="Log in" />
 </form>
+
+<?php if (!isset($_POST['mail'])) { ?>
+<p><a onclick="document.getElementById('mailpass').removeAttribute('hidden'); this.remove()">Wachtwoord vergeten?</a></p>
+<?php } ?>
+
+<form id="mailpass" action="/login/mailpass" method="post"<?php if (!isset($_POST['mail'])) { ?> hidden<?php } ?>>
+       <h3>Wachtwoord vergeten</h3>
+       <p>Als er een e-mailadres was ingesteld kun je hieronder een verzoek indienen om opnieuw een wachtwoord in te stellen.</p>
+       <input type="email" id="mail" name="mail" placeholder="E-mailadres" value="<?php
+               if (isset($_POST['mail'])) print htmlspecialchars($_POST['mail']);
+       ?>" />
+       <input type="submit" value="Verstuur" />
+</form>