From d28a2e7022c827e1474e8b3159a9c336bd11f6d9 Mon Sep 17 00:00:00 2001
From: Kwesi Banson Jnr <kwesibanson@Jaehaerys.local>
Date: Fri, 20 Feb 2026 05:59:27 +0000
Subject: [PATCH] Fix: insecure login form action URL

---
 php_code/resources/views/user-auth/login.blade.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/php_code/resources/views/user-auth/login.blade.php b/php_code/resources/views/user-auth/login.blade.php
index dfe6cd0b..25ab3e7c 100644
--- a/php_code/resources/views/user-auth/login.blade.php
+++ b/php_code/resources/views/user-auth/login.blade.php
@@ -40,7 +40,7 @@
         </div>
         <h4 class="mb-3">Login</h4>
         @include('common.notifications')
-        <form class="needs-validation" action="{{ url('user-login') }}" method="POST">
+        <form class="needs-validation" action="/user-login" method="POST">
           @csrf
           <div class="row g-3">
             <div class="col-12">