diff options
author | sgiehl <stefan@piwik.org> | 2015-03-14 22:18:40 +0300 |
---|---|---|
committer | sgiehl <stefan@piwik.org> | 2015-03-14 22:18:40 +0300 |
commit | 422167f5a8c14ed59374752ba5b8af85fb2d50f2 (patch) | |
tree | a04576350a1532c702692495818f3e7ef4224ede /plugins/Login/Controller.php | |
parent | 649337c7a37a3fda9a35532240ef06092fd2f7e3 (diff) |
fixes #7432 - remove action attribute from login form to force the browser to use the current url (including the hash)
Diffstat (limited to 'plugins/Login/Controller.php')
-rw-r--r-- | plugins/Login/Controller.php | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/plugins/Login/Controller.php b/plugins/Login/Controller.php index 270b788380..b9660a221d 100644 --- a/plugins/Login/Controller.php +++ b/plugins/Login/Controller.php @@ -93,6 +93,7 @@ class Controller extends \Piwik\Plugin\Controller function login($messageNoAccess = null, $infoMessage = false) { $form = new FormLogin(); + $form->removeAttribute('action'); // remove action attribute, otherwise hash part will be lost if ($form->validate()) { $nonce = $form->getSubmitValue('form_nonce'); if (Nonce::verifyNonce('Login.login', $nonce)) { |