Perform account recovery over POST, not GET

This commit is contained in:
Kijin Sung 2017-09-11 20:52:33 +09:00
parent 7145d38822
commit fdc4610bfb
2 changed files with 13 additions and 7 deletions

View file

@ -6,7 +6,7 @@
<div cond="$XE_VALIDATOR_MESSAGE && $XE_VALIDATOR_ID == 'modules/member/skin/default/find_member_account/1'" class="message {$XE_VALIDATOR_MESSAGE_TYPE}">
<p>{$XE_VALIDATOR_MESSAGE}</p>
</div>
<form action="{getUrl('', 'act', 'procMemberFindAccount')}" method="get" ruleset="findAccount">
<form action="{getUrl('', 'act', 'procMemberFindAccount')}" method="post" ruleset="findAccount">
<input type="hidden" name="mid" value="{$mid}" />
<input type="hidden" name="act" value="procMemberFindAccount" />
<input type="hidden" name="document_srl" value="{$document_srl}" />
@ -26,7 +26,7 @@
<div cond="$XE_VALIDATOR_MESSAGE && $XE_VALIDATOR_ID == 'modules/member/skin/default/find_member_account/2'" class="message {$XE_VALIDATOR_MESSAGE_TYPE}">
<p>{$XE_VALIDATOR_MESSAGE}</p>
</div>
<form action="{getUrl('', 'act', 'procMemberFindAccountByQuestion')}" method="get" ruleset="@find_member_account_by_question">
<form action="{getUrl('', 'act', 'procMemberFindAccountByQuestion')}" method="post" ruleset="@find_member_account_by_question">
<input type="hidden" name="module" value="member" />
<input type="hidden" name="mid" value="{$mid}" />
<input type="hidden" name="document_srl" value="{$document_srl}" />

View file

@ -4,8 +4,10 @@
<div cond="$XE_VALIDATOR_MESSAGE && $XE_VALIDATOR_ID == 'modules/member/skin/simple_world/find_member_account/1'" class="rx_member-notice {$XE_VALIDATOR_MESSAGE_TYPE}">
<p>{$XE_VALIDATOR_MESSAGE}</p>
</div>
<p class="rx_member-notice">{lang('member.about_find_member_account')}</p>
<form action="{getUrl('', 'act', 'procMemberFindAccount')}" method="get" ruleset="findAccount">
<p cond="!$XE_VALIDATOR_MESSAGE || $XE_VALIDATOR_ID !== 'modules/member/skin/simple_world/find_member_account/1'" class="rx_member-notice">
{lang('member.about_find_member_account')}
</p>
<form action="{getUrl('', 'act', 'procMemberFindAccount')}" method="post" ruleset="findAccount">
<input type="hidden" name="mid" value="{$mid}" />
<input type="hidden" name="act" value="procMemberFindAccount" />
<input type="hidden" name="document_srl" value="{$document_srl}" />
@ -26,8 +28,10 @@
<div cond="$XE_VALIDATOR_MESSAGE && $XE_VALIDATOR_ID == 'modules/member/skin/simple_world/find_member_account/2'" class="rx_member-notice {$XE_VALIDATOR_MESSAGE_TYPE}">
<p>{$XE_VALIDATOR_MESSAGE}</p>
</div>
<p class="rx_member-notice">{lang('member.about_find_account_question')}</p>
<form action="{getUrl('', 'act', 'procMemberFindAccountByQuestion')}" method="get" ruleset="@find_member_account_by_question">
<p cond="!$XE_VALIDATOR_MESSAGE || $XE_VALIDATOR_ID !== 'modules/member/skin/simple_world/find_member_account/2'" class="rx_member-notice">
{lang('member.about_find_account_question')}
</p>
<form action="{getUrl('', 'act', 'procMemberFindAccountByQuestion')}" method="post" ruleset="@find_member_account_by_question">
<input type="hidden" name="module" value="member" />
<input type="hidden" name="mid" value="{$mid}" />
<input type="hidden" name="document_srl" value="{$document_srl}" />
@ -67,7 +71,9 @@
<div cond="$XE_VALIDATOR_MESSAGE && $XE_VALIDATOR_ID == 'modules/member/skin/simple_world/find_member_account/3'" class="rx_member-notice {$XE_VALIDATOR_MESSAGE_TYPE}">
<p>{$XE_VALIDATOR_MESSAGE}</p>
</div>
<p class="rx_member-notice">{lang('member.about_resend_auth_mail')}</p>
<p cond="!$XE_VALIDATOR_MESSAGE || $XE_VALIDATOR_ID !== 'modules/member/skin/simple_world/find_member_account/3'" class="rx_member-notice">
{lang('member.about_resend_auth_mail')}
</p>
<form ruleset="resendAuthMail" action="{getUrl('', 'act', 'procMemberResendAuthMail')}" method="post">
<input type="hidden" name="module" value="member" />
<input type="hidden" name="act" value="procMemberResendAuthMail" />