4 Commits

Author	SHA1	Message	Date
Bart Visscher	0a614429af	Change the lostpassword flow to a controller	2012-10-17 17:24:49 +02:00
Lukas Reschke	f5fe95a131	Removed sectoken ... This token is completly useless since an attacker can easily extract it from the page.	2012-09-29 15:15:35 +02:00
Frank Karlitschek	6bdefef31e	csrf protection	2012-04-26 19:35:33 +02:00
Bart Visscher	e8c6252a4c	Move lostpassword to core dir	2011-10-03 20:44:01 +02:00