Add sfsr protection and admin pwd change script for powershell

2026-08-29 20:07:00 +03:00
parent 8a2cbe5b8b
commit 4512f78033
13 changed files with 118 additions and 5 deletions
@@ -23,7 +23,7 @@
        {% if current_user.role == 'admin' %}<a href="{{ url_for('admin_users') }}">Accounts</a>{% endif %}
        <a href="{{ url_for('change_password') }}">Password</a>
        <span class="user-chip">{{ current_user.username }}</span>
-        <form action="{{ url_for('logout') }}" method="post"><button class="text-button" type="submit">Log out</button></form>
+        <form action="{{ url_for('logout') }}" method="post"><input type="hidden" name="csrf_token" value="{{ csrf_token() }}"><button class="text-button" type="submit">Log out</button></form>
      {% else %}
        <a href="{{ url_for('login') }}">Sign in</a>
        <a class="button compact" href="{{ url_for('register') }}">Create account</a>