From 802b601b59dfecd784e43388a5451ca01ca1678a Mon Sep 17 00:00:00 2001
From: Pontoporeia <pontoporeia@happyngreen.fr>
Date: Tue, 18 Aug 2026 23:41:25 +0200
Subject: [PATCH] admin parametres: remove the remove-credentials danger zone

---
 app/templates/admin/parametres.php | 20 --------------------
 1 file changed, 20 deletions(-)

diff --git a/app/templates/admin/parametres.php b/app/templates/admin/parametres.php
index 42bc567..a007aef 100644
--- a/app/templates/admin/parametres.php
+++ b/app/templates/admin/parametres.php
@@ -191,26 +191,6 @@
                 </div>
             </form>
 
-            <!-- Danger zone: remove credentials -->
-            <?php if ($hasPassword): ?>
-            <fieldset class="param-danger-zone">
-                <legend>Supprimer la configuration du mot de passe</legend>
-                <p>
-                    Supprime le hash de la base de données. L'accès admin
-                    ne sera plus protégé (mode développement).
-                </p>
-                <?php /* TODO: replace this browser confirm() with a proper <dialog> modal like the other confirmations */ ?>
-                <form method="post" action="/admin/actions/account.php"
-                      onsubmit="return confirm('Supprimer le mot de passe ? L\'accès admin ne sera plus protégé.')">
-                    <input type="hidden" name="csrf_token" value="<?= htmlspecialchars($_SESSION['csrf_token']) ?>">
-                    <input type="hidden" name="action" value="remove_credentials">
-                    <input type="hidden" name="redirect" value="/admin/parametres.php">
-                    <input type="hidden" name="current_password_remove" value="">
-                    <button type="submit" class="btn btn--danger">Supprimer le mot de passe</button>
-                </form>
-            </fieldset>
-            <?php endif; ?>
-
         </fieldset>
 
         <button type="submit" class="btn btn--primary" form="account-password-form">