redo ant csrf token

ensure anti csrf token and session is only created after login
2024-01-13 01:17:07 +08:00
parent f2a9facfaf
commit 183e73eca2
7 changed files with 96 additions and 47 deletions
--- a/Sean/views/login.ejs
+++ b/Sean/views/login.ejs
@@ -86,7 +86,6 @@ button:hover {

      <label for="password">Password</label>
      <input type="password" id="password" name="password" placeholder="Enter your password" required>
-      <input type="hidden" name="csrf_token" value="<%= csrfToken %>">
      <button type="submit">Login</button>
    </form>