From: Mischa POSLAWSKY <perl@shiar.org>
Date: Wed, 25 Apr 2018 12:03:06 +0000 (+0200)
Subject: login: match posted input in user name value
X-Git-Tag: v3.0~18
X-Git-Url: http://git.shiar.net/minimedit.git/commitdiff_plain/73246f5bb2c7560d91275f48d9bcc24729f7b9f1

login: match posted input in user name value

Cookie value could still be shown after post, due to partial fix in commit
v2.5-1-g4c8b6c0ab0 (2018-04-20) [exclude cookie data from user name default].
---

diff --git a/login/form.inc.php b/login/form.inc.php
index b7d8971..bfcb2dd 100644
--- a/login/form.inc.php
+++ b/login/form.inc.php
@@ -2,7 +2,7 @@
 
 <form action="" method="post">
 	<input id="login" name="login" placeholder="Gebruikersnaam" value="<?php
-		if (isset($_POST['login'])) print htmlspecialchars($_REQUEST['login']);
+		if (isset($_POST['login'])) print htmlspecialchars($_POST['login']);
 	?>" />
 	<input id="pass" name="pass" type="password" value="" placeholder="Wachtwoord" />
 	<input type="submit" value="Log in" />