Adding token to Clear Text Submission of Password

@@ -361,10 +361,11 @@ public function login()
 public function do_login()
 public function do_login()
 {
 {
 /*Code for token generation Flexydial Security Purpose*/
 /*Code for token generation Flexydial Security Purpose*/
-  session_start();
+session_start();
 $newpass= Input::get('password');
 $newpass= Input::get('password');
 $encrypt_password=str_replace($_SESSION['token_prev'],"",$newpass);
 $encrypt_password=str_replace($_SESSION['token_prev'],"",$newpass);
 $encrypt_password=str_replace($_SESSION['token_end'],"",$encrypt_password);
 $encrypt_password=str_replace($_SESSION['token_end'],"",$encrypt_password);
+$secured_token=Input::get('security_token');
 /*Code for token generation Flexydial Security Purpose*/
 /*Code for token generation Flexydial Security Purpose*/
 
 
 //static Logout based on time - changes done by manish on 22-11-16
 //static Logout based on time - changes done by manish on 22-11-16
@@ -401,9 +402,11 @@ if($user)
   }
   }
 }
 }
 
 
-
 /*Auth::attempt( ['username' => Input::get('username'), 'password' => $encrypt_password] );*/
 /*Auth::attempt( ['username' => Input::get('username'), 'password' => $encrypt_password] );*/
-Auth::attempt( ['username' => Input::get('username'), 'password' => $encrypt_password]);
+if ($secured_token==$_SESSION['token_security']) {
+ Auth::attempt( ['username' => Input::get('username'), 'password' => $encrypt_password]);
+}
+
 
 
 if(Auth::guest())
 if(Auth::guest())
 {
 {

@@ -17,24 +17,33 @@ if (isset($_SESSION['token_prev'])) {
    unset($_SESSION['token_prev']);
    unset($_SESSION['token_prev']);
 
 
    $_SESSION['token_prev']=randomPassword();
    $_SESSION['token_prev']=randomPassword();
-   # code...
 }
 }
 else{
 else{
 $_SESSION['token_prev']=randomPassword();
 $_SESSION['token_prev']=randomPassword();
 
 
 }
 }
-//Session2
+
 if (isset($_SESSION['token_end'])) {
 if (isset($_SESSION['token_end'])) {
    unset($_SESSION['token_end']);
    unset($_SESSION['token_end']);
 
 
    $_SESSION['token_end']=randomPassword();
    $_SESSION['token_end']=randomPassword();
-   # code...
+  
 }
 }
 else{
 else{
 $_SESSION['token_end']=randomPassword();
 $_SESSION['token_end']=randomPassword();
 
 
 
 
 }
 }
+if (isset($_SESSION['token_security'])) {
+   unset($_SESSION['token_security']);
+
+   $_SESSION['token_security']=randomPassword();
+   # code...
+}
+else{
+$_SESSION['token_security']=randomPassword();
+
+}
 /*Code for token generation Flexydial Security Purpose*/
 /*Code for token generation Flexydial Security Purpose*/
 
 
 use \App\Models\User;
 use \App\Models\User;
@@ -333,6 +342,7 @@ if(isset($error))
                                     <input type="hidden" name="_token" value="{{{ csrf_token() }}}" />
                                     <input type="hidden" name="_token" value="{{{ csrf_token() }}}" />
                                     <input type="hidden" id="ses_token_prev" value="<?php echo $_SESSION['token_prev'];?>" />
                                     <input type="hidden" id="ses_token_prev" value="<?php echo $_SESSION['token_prev'];?>" />
                                     <input type="hidden" id="ses_token_end" value="<?php echo $_SESSION['token_end'];?>" />
                                     <input type="hidden" id="ses_token_end" value="<?php echo $_SESSION['token_end'];?>" />
+                                    <input type="hidden" id="security_token"  name="security_token" value="<?php echo $_SESSION['token_security'];?>" />
 
 
 
 
                                       <div class="form-group">
                                       <div class="form-group">