From 6ebe4849dd75ec01197bf465ea20b6aa74e770a1 Mon Sep 17 00:00:00 2001
From: Guilhem Moulin <guilhem.moulin@fripost.org>
Date: Mon, 21 Jan 2013 05:23:51 +0100
Subject: More secure way to check unlock tokens.

---
 templates/list-domains.html | 2 +-
 templates/new-domain.tt     | 8 +++-----
 2 files changed, 4 insertions(+), 6 deletions(-)

(limited to 'templates')

diff --git a/templates/list-domains.html b/templates/list-domains.html
index 5edb4fc..e31915f 100644
--- a/templates/list-domains.html
+++ b/templates/list-domains.html
@@ -35,7 +35,7 @@
         <TMPL_IF NAME=__even__><tr class="odd"><TMPL_ELSE><tr></TMPL_IF>
           <td><span class="domain"><TMPL_UNLESS NAME=ispending><a href="<TMPL_VAR NAME=domainURI>/"></TMPL_UNLESS><TMPL_VAR NAME=domain><TMPL_UNLESS NAME=ispending></a></TMPL_UNLESS></span></td>
           <td><TMPL_IF NAME=ispending
-             ><form class="unlock" method="post" action="?"
+             ><form class="unlock" method="post" action="<TMPL_VAR NAME=domain>/?"
                 ><input type="text" name="unlock" size="32"
                 ><input type="hidden" name="domain" value="<TMPL_VAR NAME=domain>"
                /><input type="submit" name="submit" value="Unlock domain"
diff --git a/templates/new-domain.tt b/templates/new-domain.tt
index d42c921..e1491a3 100644
--- a/templates/new-domain.tt
+++ b/templates/new-domain.tt
@@ -21,12 +21,10 @@ The token will expire after 24 hours.
 
 Note that adding your domain in our system is not enough to let us
 manage your e-mails. You also need to change your MX'es to use ours;
-under GNU/Linux you can list our current MX'es with the following
-command:
+if the BIND utils are installed on your system, you can list our
+current MX'es with the following command:
 
-  dig +short fripost.org MX
+  dig MX +short fripost.org
 
 
 Cheers,
--- 
-The Fripost administration team.
-- 
cgit v1.2.3