CSRF

web/templates/login.html

@@ -9,6 +9,7 @@
                                 </td>
                                 <td style="padding: 20px 0 0 0;">
                                     <form method="post" action="/login/" >
+                                    <input type="hidden" name="token" value="<?php echo $_SESSION['token']; ?>">
                                     <table class="login-box">
                                         <tr>
                                             <td syle="padding: 12px 0 0 2px;">