From fc82ba48d0469aab2fac515020fb308551fa9cce Mon Sep 17 00:00:00 2001 From: Sohel Ahmed Mesaniya Date: Thu, 16 Nov 2017 14:33:46 +0530 Subject: [PATCH] Set password to empty string when reloading login form (#158) --- controllers/SiteController.php | 2 ++ 1 file changed, 2 insertions(+) diff --git a/controllers/SiteController.php b/controllers/SiteController.php index 63ae7fe..1a84f9c 100644 --- a/controllers/SiteController.php +++ b/controllers/SiteController.php @@ -79,6 +79,8 @@ class SiteController extends Controller if ($model->load(Yii::$app->request->post()) && $model->login()) { return $this->goBack(); } + + $model->password = ''; return $this->render('login', [ 'model' => $model, ]);