Security fix: Merge 12942 from trunk

12 years ago · 664b1060da
parent 990344d155
commit 664b1060da
2 changed files with 3 additions and 3 deletions
--- a/root/tt/device.tt
+++ b/root/tt/device.tt
@ -126,7 +126,7 @@
 							</tr>
 						[% END %]
 					</table>
-					<form action="/device/spa">
+					<form action="/device/spa" method="post">
 						<button type="submit" name="confspa" value="1">Ändern</button>
 					</form>
 				[% END %]
@ -184,7 +184,7 @@
 								</tr>
 								[% END %]
 							</table>
-							<form action="/device/phone">
+							<form action="/device/phone" method="post">
 								<button type="submit" name="confphone" value="[% phone.ext %]">Ändern</button>
 							</form>
 						[% ELSE %]
--- a/root/tt/login.tt
+++ b/root/tt/login.tt
@ -18,7 +18,7 @@

      <div class="spalte1">

-         <form id="anmelden" action="/login/do_login">
+         <form method="post" id="anmelden" action="/login/do_login">
           <fieldset>
             <span>
               <label id="lbenutzer" for="benutzer">[% Catalyst.loc('username:') %]</label>