From 0491bc9b85b99e95b27f3c281f01d774aad3c246 Mon Sep 17 00:00:00 2001
From: Sebastian <seba4928@edu.sde.dk>
Date: Tue, 30 Jun 2020 10:42:10 +0200
Subject: [PATCH] Fixed Last normal security.

---
 skolehjem/app/Http/Controllers/RootController.php   | 5 +++++
 skolehjem/app/Http/Controllers/UserController.php   | 2 +-
 skolehjem/resources/views/app/users/login.blade.php | 3 ++-
 3 files changed, 8 insertions(+), 2 deletions(-)

diff --git a/skolehjem/app/Http/Controllers/RootController.php b/skolehjem/app/Http/Controllers/RootController.php
index 4839f56..284d91f 100644
--- a/skolehjem/app/Http/Controllers/RootController.php
+++ b/skolehjem/app/Http/Controllers/RootController.php
@@ -7,6 +7,11 @@ use Illuminate\Http\Response;
 
 class RootController extends Controller
 {
+    function __construct()
+    {
+        $this->middleware("auth");
+    }
+
     public function index() {
         return Response::detect("root.index");
     }
diff --git a/skolehjem/app/Http/Controllers/UserController.php b/skolehjem/app/Http/Controllers/UserController.php
index 105dcb9..85613b3 100644
--- a/skolehjem/app/Http/Controllers/UserController.php
+++ b/skolehjem/app/Http/Controllers/UserController.php
@@ -200,7 +200,7 @@ class UserController extends Controller
     public function logout(Request $request) {
         Auth::logout();
 
-        return redirect()->route("root.index");
+        return redirect()->route("users.login");
     }
 
     /*******************************************/
diff --git a/skolehjem/resources/views/app/users/login.blade.php b/skolehjem/resources/views/app/users/login.blade.php
index aff8766..52c34cd 100644
--- a/skolehjem/resources/views/app/users/login.blade.php
+++ b/skolehjem/resources/views/app/users/login.blade.php
@@ -9,7 +9,8 @@
         <div class="brand">
             <img src="{{URL::asset('/images/logos/Logo-hvid.svg')}}" alt="Syddansk Erhvervsskole">
         </div>
-        <form action="" method="post">
+        <form action="{{ route("users.login") }}" method="post">
+            @csrf
             <input class="appinput" type="email" name="email" placeholder="Email" required>
             <input class="appinput" type="password" name="password" placeholder="Password" required>
             <label class="toggle">