Ebbe BaßandClaude Sonnet 5.5
94c1d39c9d
Page at /email asks for the new address and the current password (shared failure counter with the password page, five requests per hour) and mails a one-hour confirmation link to the new address. Confirming writes the address and mails the old address a 24-hour undo link; undoing restores it, ends every session of the user and notifies the Admin (ADMIN_NOTIFY_EMAIL). Link pages show on GET and apply on POST; tokens are stored only as hashes, single use, and are blanked from every log line. New table owned by profile, German text, tests; review findings logged in the plan. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01FocPJ75XPma7TcuYEMy8zm
12 lines
526 B
HTML
12 lines
526 B
HTML
{% extends "base.html" %}
|
|
{% load i18n %}
|
|
{% block title %}{% trans "Confirmation link sent" %}{% endblock %}
|
|
{% block content %}
|
|
<h1>{% trans "Confirmation link sent" %}</h1>
|
|
<div class="notice success" role="status">
|
|
<p>{% trans "We sent a link to your new e-mail address. It is valid for one hour." %}</p>
|
|
</div>
|
|
<p>{% trans "Your address has not changed yet. It changes after you open the link and confirm." %}</p>
|
|
<p><a class="button" href="{% url 'profile' %}">{% trans "Back to the profile" %}</a></p>
|
|
{% endblock %}
|