Duoble click login - TokenMismatchException in VerifyCsrfToken.php

perhaps you could disable the login button after the first click and then re-enable it if there was a problem?

when you login for the first time, what happens if you double clikc the login? i expect you should still get TokenMismatch, logging out & back in is a red herring I think?

Or just exclude login form from csrf.

Actually does someone know why protect login form with csrf token? I cant imagine profit of doing csrf atack against login form

@shez1983 I tried to disabled like this $("#login").one('click', function (event) { $(this).prop('disabled', true); }); Login for the first time it does not matter , one or duoble clicks, everything work fine.

@rmoiseev Some reading for you :)

http://stackoverflow.com/questions/6412813/do-login-forms-need-tokens-against-csrf-attacks

http://security.stackexchange.com/questions/62769/must-login-and-logout-action-have-csrf-protection