redo ant csrf token

ensure anti csrf token and session is only created after login
2024-01-13 01:17:07 +08:00
parent f2a9facfaf
commit 183e73eca2
7 changed files with 96 additions and 47 deletions
--- a/Sean/views/otp.ejs
+++ b/Sean/views/otp.ejs
@ -69,7 +69,7 @@
        <label for="otp">OTP:</label>
        <input type="text" id="otp" name="otp" required>
        <br>
-        <input type="hidden" name="csrf_token" value="<%= csrfToken %>">
+        
        <button type="submit">Submit OTP</button>
    </form>
 </body>