From 772d06ad961403b90a80f4535eef4270bc425e22 Mon Sep 17 00:00:00 2001
From: Roger Rehnelt <noreply@maennchen1.de>
Date: Sat, 3 Oct 2026 15:56:30 +0200
Subject: Widerrufsformular: Bot-Feld ohne Autofill-Namen
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Das versteckte Feld heißt wpsg_rv_check statt url, damit Browser es nicht ausfüllen. Test: Fehlversuche sperren den Widerruf nicht.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 views/mods/mod_revocation/ajaxDialogContent.phtml | 4 ++--
 views/mods/mod_revocation/page_form.phtml         | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/views/mods/mod_revocation/ajaxDialogContent.phtml b/views/mods/mod_revocation/ajaxDialogContent.phtml
index 960dc20..04f4b87 100644
--- a/views/mods/mod_revocation/ajaxDialogContent.phtml
+++ b/views/mods/mod_revocation/ajaxDialogContent.phtml
@@ -140,8 +140,8 @@ $arReason = \wpsgRevocation\Revocation::getReasons();
 
 	<?php /* Bot-Falle (S21): für Menschen und Screenreader unsichtbar, nicht in der Tab-Reihenfolge */ ?>
 	<div class="wpsg_revocation_hp" aria-hidden="true">
-		<label class="label" for="wpsg_rvd_url"><?php echo __('Bitte leer lassen', 'wpsg'); ?></label>
-		<input type="text" id="wpsg_rvd_url" name="wpsg_revocation_reason[url]" value="" tabindex="-1" autocomplete="off" />
+		<label class="label" for="wpsg_rvd_check"><?php echo __('Bitte leer lassen', 'wpsg'); ?></label>
+		<input type="text" id="wpsg_rvd_check" name="wpsg_revocation_reason[wpsg_rv_check]" value="" tabindex="-1" autocomplete="off" />
 	</div>
 
 	<div class="form_field">
diff --git a/views/mods/mod_revocation/page_form.phtml b/views/mods/mod_revocation/page_form.phtml
index 1dfcbc9..aacd6f2 100644
--- a/views/mods/mod_revocation/page_form.phtml
+++ b/views/mods/mod_revocation/page_form.phtml
@@ -89,8 +89,8 @@
 
 		<?php /* Bot-Falle (S21): für Menschen und Screenreader unsichtbar, nicht in der Tab-Reihenfolge */ ?>
 		<div class="wpsg_revocation_hp" aria-hidden="true">
-			<label class="label" for="wpsg_rvp_url"><?php echo \__('Bitte leer lassen', 'wpsg'); ?></label>
-			<input type="text" id="wpsg_rvp_url" name="wpsg_revocation_reason[url]" value="" tabindex="-1" autocomplete="off" />
+			<label class="label" for="wpsg_rvp_check"><?php echo \__('Bitte leer lassen', 'wpsg'); ?></label>
+			<input type="text" id="wpsg_rvp_check" name="wpsg_revocation_reason[wpsg_rv_check]" value="" tabindex="-1" autocomplete="off" />
 		</div>
 
 		<div class="form_field">
-- 
cgit v1.2.3