Author: Derick Rethans (derickr)
Date: 2026-06-23T13:39:31+01:00
Commit:
https://github.com/php/web-master/commit/f8668ebeb363d5f4b34b786f1a30e80b49f8b6e7
Raw diff:
https://github.com/php/web-master/commit/f8668ebeb363d5f4b34b786f1a30e80b49f8b6e7.diff
Hard code 'forgot.php' end point
Changed paths:
M public/forgot.php
Diff:
diff --git a/public/forgot.php b/public/forgot.php
index 7d68c77..3abba44 100644
--- a/public/forgot.php
+++ b/public/forgot.php
@@ -44,7 +44,7 @@ function random_password() {
<p>You're in the home stretch now. Just choose a new password
(typing it twice, to avoid typos and another trip around this
merry-go-round).</p>
-<form method="post" action="<?php echo htmlentities($_SERVER['PHP_SELF']) ?>">
+<form method="post" action="/forgot.php">
password: <input type="password" name="n1" value="<?= hsc($n1)?>" />
<br />again: <input type="password" name="n2" value="<?= hsc($n1)?>" />
<br /><input type="submit" value="do it!" />
