add password-reset flow: request endpoint + reset page + login link (shared OneTimeToken)

2026-09-25 01:53:03 +02:00 · 2026-08-24 11:36:02 +02:00
parent d7184e4447
commit ddae5d8fef
7 changed files with 269 additions and 10 deletions
@@ -14,6 +14,11 @@
                    <button type="submit" class="btn btn--primary">Se connecter</button>
                </div>
            </form>
+
+            <form method="post" action="/admin/request-reset.php" class="admin-form" style="margin-top:var(--space-s)">
+                <input type="hidden" name="csrf_token" value="<?= htmlspecialchars($_SESSION['csrf_token'] ?? '') ?>">
+                <button type="submit" class="btn btn--muted">Mot de passe oublié ?</button>
+            </form>
        </div>
    </div>
 </main>