{% extends 'vulnerabilities/levels/base.html' %}
{% load static %}
{% load crispy_forms_tags %}

{% block level_title %}Behind the Screen: Unraveling Hidden Controls{% endblock %}

{% block level_description %}
<div>
  <p>
  Building on the insights gained from the <a href="{% url 'vulnerabilities/level' level_num=2 %}">last challenge</a>, you find yourself in a scenario that feels eerily similar. The admin's email: <strong class="story-emphasis">admin@example.com</strong>, remains your target, and your mission is unchanged. In fact, you haven't even strayed from the password reset page we've grown accustomed to.
  </p>
  <p>
    However, this time, the overt missteps seen previously have been addressed. Or have they? Despite the developer's efforts to fortify the site's defenses, even a smallest oversight can be a door left open for anyone who dares look deep enough.
  </p>
  <p>
    This challenge invites you to listen closely, to hear the soft hum of data in transit, and to question what truths lie hidden within. The answers you seek might not be on the surface, for in the realm of cyber security, the unseen is often the most telling.
  </p>
</div>
{% endblock %}

{% block hint_url %}
{% url 'vulnerabilities/level/hint' level_num=3 hint_num=1 %}
{% endblock %}

{% block level_content %}
<div class="container mt-5">
  <div class="row">
    <div class="col-md-6 offset-md-3">
      <div class="card">
        <div class="card-body">
          <h2 class="card-title text-center mb-4">Change your password</h2>
          <form method="post" class="needs-validation" novalidate>
            {% csrf_token %}
            {{ form | crispy }}
            <div class="d-grid gap-2">
              <button type="submit" class="btn btn-primary">Change</button>
            </div>
          </form>
        </div>
      </div>
    </div>
  </div>
</div>
{% endblock %}

{% comment %}
vi: ft=htmldjango
{% endcomment %}