Don't remember password on failed login

web2py · Jan 30, 2019 · 1457e12 · 1457e12
1 parent 603f54f
commit 1457e12
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/gluon/tools.py b/gluon/tools.py
@@ -2637,8 +2637,9 @@ def login(self,
                         # invalid login
                         session.flash = specific_error if self.settings.login_specify_error else self.messages.invalid_login
                         callback(onfail, None)
+                        request.post_vars['password'] = ""
                         redirect(
-                            self.url(args=request.args, vars=request.post_vars),
+                            self.url(args=request.args, get_vars=request.get_vars, post_vars=request.post_vars),
                             client_side=settings.client_side)
 
             else:  # use a central authentication server