From 4c8b6c0ab04790db4aa5610fa0547f1711074333 Mon Sep 17 00:00:00 2001
From: Mischa POSLAWSKY <perl@shiar.org>
Date: Fri, 20 Apr 2018 15:44:50 +0200
Subject: [PATCH] login: exclude cookie data from user name default

Apparently included in $_REQUEST in Xenat's PHP environment.
---
 login.inc.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/login.inc.php b/login.inc.php
index 2809478..4d05ded 100644
--- a/login.inc.php
+++ b/login.inc.php
@@ -6,8 +6,8 @@ if (isset($message)) {
 }
 ?>
 <form action="" method="post">
-	<input id="login" name="login" placeholder="Huisnummer" value="<?php
-		if (isset($_REQUEST['login'])) print htmlspecialchars($_REQUEST['login']);
+	<input id="login" name="login" placeholder="Gebruikersnaam" value="<?php
+		if (isset($_POST['login'])) print htmlspecialchars($_REQUEST['login']);
 	?>" />
 	<input id="pass" name="pass" type="password" value="" placeholder="Wachtwoord" />
 	<input type="submit" value="Log in" />
-- 
2.30.0