08-21-2017, 12:19 PM
Anything is possible!
What you would have to do to make something like this is to copy the login form over to the usersc folder and change the line that mentions init (line 25) to:
From there, you can modify the login form to your heart's content.
The request itself does have a CSRF protection system, but there's nothing stopping you from either redirecting to another page and looking for a response from your app or only looking for it on submission of that particular form and not all $_POST.
What you would have to do to make something like this is to copy the login form over to the usersc folder and change the line that mentions init (line 25) to:
Code:
<?php require_once '../users/init.php'; ?>
From there, you can modify the login form to your heart's content.
The request itself does have a CSRF protection system, but there's nothing stopping you from either redirecting to another page and looking for a response from your app or only looking for it on submission of that particular form and not all $_POST.