From 73246f5bb2c7560d91275f48d9bcc24729f7b9f1 Mon Sep 17 00:00:00 2001
From: Mischa POSLAWSKY <perl@shiar.org>
Date: Wed, 25 Apr 2018 14:03:06 +0200
Subject: [PATCH] login: match posted input in user name value

Cookie value could still be shown after post, due to partial fix in commit
v2.5-1-g4c8b6c0ab0 (2018-04-20) [exclude cookie data from user name default].
---
 login/form.inc.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/login/form.inc.php b/login/form.inc.php
index b7d8971..bfcb2dd 100644
--- a/login/form.inc.php
+++ b/login/form.inc.php
@@ -2,7 +2,7 @@
 
 <form action="" method="post">
 	<input id="login" name="login" placeholder="Gebruikersnaam" value="<?php
-		if (isset($_POST['login'])) print htmlspecialchars($_REQUEST['login']);
+		if (isset($_POST['login'])) print htmlspecialchars($_POST['login']);
 	?>" />
 	<input id="pass" name="pass" type="password" value="" placeholder="Wachtwoord" />
 	<input type="submit" value="Log in" />
-- 
2.30.0