From 15830af5b190cfb6f28e0bdf0f4bf110256ed9ef Mon Sep 17 00:00:00 2001
From: haturatu <taro@eyes4you.org>
Date: Mon, 13 Oct 2025 00:08:25 +0900
Subject: fix(csrf): js csrf support

---
 templates/php/login.php | 1 +
 1 file changed, 1 insertion(+)

(limited to 'templates/php/login.php')

diff --git a/templates/php/login.php b/templates/php/login.php
index f3e5113..c4644ef 100644
--- a/templates/php/login.php
+++ b/templates/php/login.php
@@ -17,6 +17,7 @@
     <div class="container form-container">
         <h2>Login Required</h2>
         <form id="login-form" action="<?php echo htmlspecialchars($paths['Login']); ?>" method="post">
+            <input type="hidden" name="gorilla.csrf.Token" value="<?php echo htmlspecialchars($_SERVER['HTTP_X_CSRF_TOKEN']); ?>">
             <div class="form-group">
                 <label for="username">Username</label>
                 <input type="text" id="username" name="username" required>
-- 
cgit v1.2.3