From a9f6f5a0e08abedb95d1d5c529a8f676777c7c73 Mon Sep 17 00:00:00 2001
From: Aevann1 <randomname42029@gmail.com>
Date: Sat, 19 Mar 2022 18:19:02 +0200
Subject: [PATCH] post

---
 files/routes/subs.py                      |  5 +--
 files/templates/admin/alt_votes.html      |  6 ++--
 files/templates/admin/app.html            |  2 +-
 files/templates/admin/awards.html         |  2 +-
 files/templates/admin/badge_grant.html    |  2 +-
 files/templates/admin/badge_remove.html   |  2 +-
 files/templates/admin/banned_domains.html |  2 +-
 files/templates/admin/sidebar.html        |  2 +-
 files/templates/award_modal.html          |  2 +-
 files/templates/ban_modal.html            |  2 +-
 files/templates/comments.html             |  8 ++---
 files/templates/contact.html              |  2 +-
 files/templates/errors/nsfw.html          |  2 +-
 files/templates/home.html                 | 20 +++++++----
 files/templates/login.html                |  2 +-
 files/templates/login_2fa.html            |  8 ++---
 files/templates/oauth.html                | 12 +++----
 files/templates/reset_password.html       |  6 ++--
 files/templates/settings.html             |  8 ++---
 files/templates/settings_apps.html        |  8 ++---
 files/templates/settings_blocks.html      |  2 +-
 files/templates/settings_css.html         |  2 +-
 files/templates/settings_filters.html     |  2 +-
 files/templates/settings_profile.html     | 38 ++++++++++----------
 files/templates/settings_profilecss.html  |  2 +-
 files/templates/settings_security.html    | 10 +++---
 files/templates/sign_up.html              |  8 ++---
 files/templates/sub/exilees.html          |  2 +-
 files/templates/sub/mods.html             |  6 ++--
 files/templates/sub/settings.html         |  8 ++---
 files/templates/submission.html           |  8 ++---
 files/templates/submit.html               |  2 +-
 files/templates/userpage.html             | 44 +++++++++++------------
 33 files changed, 123 insertions(+), 114 deletions(-)

diff --git a/files/routes/subs.py b/files/routes/subs.py
index 45fb64a7d..11773a252 100644
--- a/files/routes/subs.py
+++ b/files/routes/subs.py
@@ -460,9 +460,10 @@ def sub_sidebar(v, sub):
 	return redirect(f'/h/{sub.name}/settings')
 
 
-@app.get("/sub_toggle/<mode>")
+@app.post("/sub_toggle")
 @auth_required
-def sub_toggle(mode, v):
+def sub_toggle(v):
+	mode = request.values.get('mode')
 	try: mode = int(mode)
 	except: abort(400)
 
diff --git a/files/templates/admin/alt_votes.html b/files/templates/admin/alt_votes.html
index 69751aa93..63a832cfc 100644
--- a/files/templates/admin/alt_votes.html
+++ b/files/templates/admin/alt_votes.html
@@ -74,9 +74,9 @@
 
 <a role="button" class="btn btn-secondary" onclick="document.getElementById('linkbtn').classList.toggle('d-none');">Link Accounts</a>
 <form action="/admin/link_accounts" method="post">
-	<input autocomplete="off" type="hidden" name="formkey" value="{{v.formkey}}">
-	<input autocomplete="off" type="hidden" name="u1" value="{{u1.id}}">
-	<input autocomplete="off" type="hidden" name="u2" value="{{u2.id}}">
+	<input type="hidden" name="formkey" value="{{v.formkey}}">
+	<input type="hidden" name="u1" value="{{u1.id}}">
+	<input type="hidden" name="u2" value="{{u2.id}}">
 	<input autocomplete="off" type="submit" id="linkbtn" class="btn btn-primary d-none" value="Confirm Link: {{u1.username}} and {{u2.username}}">
 </form>
 
diff --git a/files/templates/admin/app.html b/files/templates/admin/app.html
index 9d62cdf28..0b31c23f4 100644
--- a/files/templates/admin/app.html
+++ b/files/templates/admin/app.html
@@ -19,7 +19,7 @@
 				<div class="body w-lg-100">
 			<label for="edit-{{app.id}}-author" class="mb-0 w-lg-25">User</label>
 			<input autocomplete="off" id="edit-{{app.id}}-author" class="form-control" type="text" name="name" value="{{app.author.username}}" readonly=readonly>
-			<input autocomplete="off" type="hidden" name="formkey" value="{{v.formkey}}">
+			<input type="hidden" name="formkey" value="{{v.formkey}}">
 			<label for="edit-{{app.id}}-name" class="mb-0 w-lg-25">App Name</label>
 			<input autocomplete="off" id="edit-{{app.id}}-name" class="form-control" type="text" name="name" value="{{app.app_name}}" readonly=readonly>
 
diff --git a/files/templates/admin/awards.html b/files/templates/admin/awards.html
index 164bbacb9..aed7bb5cb 100644
--- a/files/templates/admin/awards.html
+++ b/files/templates/admin/awards.html
@@ -36,7 +36,7 @@
 	<h5>User Award Grant</h5>
 
 	<form action="/admin/awards", method="post">
-		<input autocomplete="off" type="hidden" name="formkey" value="{{v.formkey}}">
+		<input type="hidden" name="formkey" value="{{v.formkey}}">
 		<label for="input-username">Username</label><br>
 		<input autocomplete="off" id="input-username" class="form-control mb-3" type="text" name="username" required>
 
diff --git a/files/templates/admin/badge_grant.html b/files/templates/admin/badge_grant.html
index 9987aa7f7..984f49222 100644
--- a/files/templates/admin/badge_grant.html
+++ b/files/templates/admin/badge_grant.html
@@ -36,7 +36,7 @@
 <h5>Badge Grant</h5>
 
 <form action="/admin/badge_grant", method="post">
-<input autocomplete="off" type="hidden" name="formkey" value="{{v.formkey}}">
+<input type="hidden" name="formkey" value="{{v.formkey}}">
 
 
 <label for="input-username">Username</label><br>
diff --git a/files/templates/admin/badge_remove.html b/files/templates/admin/badge_remove.html
index 14654b8c4..9c1be65a0 100644
--- a/files/templates/admin/badge_remove.html
+++ b/files/templates/admin/badge_remove.html
@@ -36,7 +36,7 @@
 <h5>Badge Remove</h5>
 
 <form action="/admin/badge_remove", method="post">
-<input autocomplete="off" type="hidden" name="formkey" value="{{v.formkey}}">
+<input type="hidden" name="formkey" value="{{v.formkey}}">
 
 
 <label for="input-username">Username</label><br>
diff --git a/files/templates/admin/banned_domains.html b/files/templates/admin/banned_domains.html
index d55f6ed8c..e7447de7f 100644
--- a/files/templates/admin/banned_domains.html
+++ b/files/templates/admin/banned_domains.html
@@ -28,7 +28,7 @@
 
 
 <form action="/admin/banned_domains" method="post">
-	<input autocomplete="off" type="hidden" name="formkey" value="{{v.formkey}}">
+	<input type="hidden" name="formkey" value="{{v.formkey}}">
 	<input autocomplete="off" name="domain" placeholder="Enter domain here.." class="form-control" required>
 	<input autocomplete="off" name="reason" placeholder="Enter ban reason here.." oninput="document.getElementById('ban-submit').disabled=false" class="form-control">
 	<input autocomplete="off" id="ban-submit" type="submit" class="btn btn-primary" value="Toggle ban" disabled>
diff --git a/files/templates/admin/sidebar.html b/files/templates/admin/sidebar.html
index ab5d6e1c4..c0d687faa 100644
--- a/files/templates/admin/sidebar.html
+++ b/files/templates/admin/sidebar.html
@@ -26,7 +26,7 @@
 			<div class="body d-lg-flex">
 				<div class="w-lg-100">
 					<form id="profile-settings" action="/admin/sidebar" method="post">
-						<input autocomplete="off" type="hidden" name="formkey" value="{{v.formkey}}">
+						<input type="hidden" name="formkey" value="{{v.formkey}}">
 						<textarea autocomplete="off" maxlength="10000" class="form-control rounded" id="bio-text" aria-label="With textarea" placeholder="Enter sidebar here..." rows="50" name="sidebar" form="profile-settings">{% if sidebar %}{{sidebar}}{% endif %}</textarea>
 
 						<div class="d-flex mt-2">
diff --git a/files/templates/award_modal.html b/files/templates/award_modal.html
index 8f59f0d61..d97e223e8 100644
--- a/files/templates/award_modal.html
+++ b/files/templates/award_modal.html
@@ -10,7 +10,7 @@
 			</div>
 			<div id="awardModalBody" class="modal-body mb-3">
 				<form id="awardTarget" class="pt-3 pb-0" action="" method="post">
-					<input autocomplete="off" type="hidden" name="formkey", value="{{v.formkey}}">
+					<input type="hidden" name="formkey", value="{{v.formkey}}">
 					<div class="card-columns award-columns awards-wrapper">
 						{% for award in v.user_awards %}
 							<a role="button" id="{{award.kind}}" class="card" onclick="pick('{{award.kind}}', {{award.price}} <= {{v.procoins}}, {{award.price}} <= {{v.coins}})">
diff --git a/files/templates/ban_modal.html b/files/templates/ban_modal.html
index fdaede353..c4e3e6c36 100644
--- a/files/templates/ban_modal.html
+++ b/files/templates/ban_modal.html
@@ -14,7 +14,7 @@
 
 				<form id="banModalForm">
 
-					<input autocomplete="off" type="hidden" name="formkey" value="{{v.formkey}}">
+					<input type="hidden" name="formkey" value="{{v.formkey}}">
 
 					<label for="ban-modal-link">Public ban reason (optional)</label>
 					<textarea autocomplete="off" maxlength="64" name="reason" form="banModalForm" class="form-control" id="ban-modal-link" aria-label="With textarea" placeholder="Enter reason"></textarea>
diff --git a/files/templates/comments.html b/files/templates/comments.html
index f3ee86caf..0aa713d1e 100644
--- a/files/templates/comments.html
+++ b/files/templates/comments.html
@@ -295,7 +295,7 @@
 				{% if v and v.id==c.author_id %}
 				<div id="comment-edit-{{c.id}}" class="d-none comment-write collapsed child">
 					<form id="comment-edit-form-{{c.id}}" action="/edit_comment/{{c.id}}" method="post" enctype="multipart/form-data"> 
-						<input autocomplete="off" type="hidden" name="formkey" value="{{v.formkey}}">
+						<input type="hidden" name="formkey" value="{{v.formkey}}">
 						<textarea autocomplete="off" {% if v.longpost %}minlength="280"{% endif %} maxlength="{% if v.bird %}140{% else %}10000{% endif %}" oninput="markdown('comment-edit-body-{{c.id}}', 'preview-edit-{{c.id}}');charLimit('comment-edit-body-{{c.id}}','charcount-edit-{{c.id}}')" id="comment-edit-body-{{c.id}}" data-id="{{c.id}}" name="body" form="comment-edit-form-{{c.id}}" class="comment-box form-control rounded" aria-label="With textarea" placeholder="Add your comment..." rows="3">{{c.body}}</textarea> 
 						
 						<div class="text-small font-weight-bold mt-1" id="charcount-edit-{{c.id}}" style="right: 1rem; bottom: 0.5rem; z-index: 3;"></div>
@@ -541,8 +541,8 @@
 		<div id="reply-to-{{c.id}}" class="d-none">
 			<div id="comment-form-space-{{c.fullname}}" class="comment-write collapsed child">
 				<form id="reply-to-t3_{{c.id}}" action="/comment" method="post" enctype="multipart/form-data"> 
-					<input autocomplete="off" type="hidden" name="formkey" value="{{v.formkey}}"> 
-					<input autocomplete="off" type="hidden" name="parent_fullname" value="{{c.fullname}}"> 
+					<input type="hidden" name="formkey" value="{{v.formkey}}"> 
+					<input type="hidden" name="parent_fullname" value="{{c.fullname}}"> 
 					<input autocomplete="off" id="reply-form-submission-{{c.fullname}}" type="hidden" name="submission" value="{{c.post.id}}"> 
 					<textarea autocomplete="off" {% if v.longpost %}minlength="280"{% endif %} maxlength="{% if v.bird %}140{% else %}10000{% endif %}" oninput="markdown('reply-form-body-{{c.fullname}}', 'reply-edit-{{c.id}}');charLimit('reply-form-body-{{c.fullname}}','charcount-{{c.id}}')" id="reply-form-body-{{c.fullname}}" data-fullname="{{c.fullname}}" name="body" form="reply-to-t3_{{c.id}}" class="comment-box form-control rounded" aria-label="With textarea" placeholder="Add your comment..." rows="3"></textarea> 
 					
@@ -598,7 +598,7 @@
 			<div id="reply-message-{{c.id}}" class="d-none">
 				<div id="comment-form-space-{{c.id}}" class="comment-write collapsed child">		
 					<form id="reply-to-message-{{c.id}}" action="/reply" method="post" class="input-group" enctype="multipart/form-data">
-						<input autocomplete="off" type="hidden" name="formkey" value="{{v.formkey}}"> 
+						<input type="hidden" name="formkey" value="{{v.formkey}}"> 
 						<textarea autocomplete="off" minlength="1" maxlength="10000" name="body" form="reply-to-t3_{{c.id}}" data-id="{{c.id}}" class="comment-box form-control rounded" id="reply-form-body-{{c.id}}" aria-label="With textarea" rows="3" oninput="markdown('reply-form-body-{{c.id}}', 'message-reply-{{c.id}}')"></textarea> 
 						<div class="comment-format" id="comment-format-bar-{{c.id}}"> 
 							<label class="btn btn-secondary format m-0" for="gif-reply-btn-{{c.id}}" onclick="loadEmojis('reply-form-body-{{c.id}}')" aria-hidden="true" data-bs-toggle="modal" data-bs-target="#emojiModal" data-bs-toggle="tooltip" data-bs-placement="bottom" title="Add Emoji">
diff --git a/files/templates/contact.html b/files/templates/contact.html
index 604e615fd..8b9120173 100644
--- a/files/templates/contact.html
+++ b/files/templates/contact.html
@@ -29,7 +29,7 @@
 	<form id="contactform" action="/send_admin" method="post" enctype="multipart/form-data">
 
 		<label for="input-message" class="mt-3">Your message</label>
-		<input autocomplete="off" type="hidden" name="formkey" value="{{v.formkey}}">
+		<input type="hidden" name="formkey" value="{{v.formkey}}">
 		<textarea autocomplete="off" maxlength="10000" id="input-message" form="contactform" name="message" class="form-control" required></textarea>
 		<label class="btn btn-secondary m-0 mt-3" for="file-upload">
 			<div id="filename"><i class="far fa-image"></i></div>
diff --git a/files/templates/errors/nsfw.html b/files/templates/errors/nsfw.html
index 9c7ab36d4..be6fc1ef0 100644
--- a/files/templates/errors/nsfw.html
+++ b/files/templates/errors/nsfw.html
@@ -16,7 +16,7 @@
 			<div class="btn-toolbar justify-content-center mb-4">
 
 				<form action="/allow_nsfw" method="post">
-					<input autocomplete="off" type="hidden" name="redir" value="{{request.path}}">
+					<input type="hidden" name="redir" value="{{request.path}}">
 					<input autocomplete="off" type="submit" class="btn btn-danger mr-2" value="Yes, I am +18">
 				</form>
 				<div><a href="/" class="btn btn-secondary">No</a></div>
diff --git a/files/templates/home.html b/files/templates/home.html
index 2361713be..6894d966b 100644
--- a/files/templates/home.html
+++ b/files/templates/home.html
@@ -56,9 +56,13 @@
 							{% endif %}
 						</button>
 						<div class="dropdown-menu" aria-labelledby="dropdownMenuButton" x-placement="bottom-start" style="position: absolute; will-change: transform; top: 0px; left: 0px; transform: translate3d(0px, 31px, 0px);min-width:100%">
-							{% if v.subs != 1 %}<a class="dropdown-item text-center" href="/sub_toggle/1"><i class="fas fa-user-group mr-3"></i>Include subscribed holes</a>{% endif %}
-							{% if v.subs != 2 %}<a class="dropdown-item text-center" href="/sub_toggle/2"><i class="fas fa-user-group mr-3"></i>Include all holes</a>{% endif %}
-							{% if v.subs != 3 %}<a class="dropdown-item text-center" href="/sub_toggle/3"><i class="fas fa-user-group mr-3"></i>View holes only</a>{% endif %}
+							<form action="/sub_toggle" method="post">
+								<input type="hidden" name="formkey" value="{{v.formkey}}">
+
+								{% if v.subs != 1 %}<button class="dropdown-item text-center" type="submit" name="mode" value="1"><i class="fas fa-user-group mr-3"></i>Include subscribed holes</button>{% endif %}
+								{% if v.subs != 2 %}<button class="dropdown-item text-center" type="submit" name="mode" value="2"><i class="fas fa-user-group mr-3"></i>Include all holes</button>{% endif %}
+								{% if v.subs != 3 %}<button class="dropdown-item text-center" type="submit" name="mode" value="3"><i class="fas fa-user-group mr-3"></i>View holes only</button>{% endif %}
+							</form>
 						</div>
 					</div>
 				{% endif %}
@@ -90,9 +94,13 @@
 							{% endif %}
 						</button>
 						<div class="dropdown-menu" aria-labelledby="dropdownMenuButton" x-placement="bottom-start" style="position: absolute; will-change: transform; top: 0px; left: 0px; transform: translate3d(0px, 31px, 0px);">
-							{% if v.subs != 1 %}<a class="dropdown-item" href="/sub_toggle/1"><i class="fas fa-user-group mr-2"></i>Include subscribed holes</a>{% endif %}
-							{% if v.subs != 2 %}<a class="dropdown-item" href="/sub_toggle/2"><i class="fas fa-user-group mr-2"></i>Include all holes</a>{% endif %}
-							{% if v.subs != 3 %}<a class="dropdown-item" href="/sub_toggle/3"><i class="fas fa-user-group mr-2"></i>View holes only</a>{% endif %}
+							<form action="/sub_toggle" method="post">
+								<input type="hidden" name="formkey" value="{{v.formkey}}">
+
+								{% if v.subs != 1 %}<button class="dropdown-item" type="submit" name="mode" value="1"><i class="fas fa-user-group mr-2"></i>Include subscribed holes</button>{% endif %}
+								{% if v.subs != 2 %}<button class="dropdown-item" type="submit" name="mode" value="2"><i class="fas fa-user-group mr-2"></i>Include all holes</button>{% endif %}
+								{% if v.subs != 3 %}<button class="dropdown-item" type="submit" name="mode" value="3"><i class="fas fa-user-group mr-2"></i>View holes only</button>{% endif %}
+							</form>
 						</div>
 					</div>
 				{% endif %}
diff --git a/files/templates/login.html b/files/templates/login.html
index 5acb72e27..df664aec7 100644
--- a/files/templates/login.html
+++ b/files/templates/login.html
@@ -75,7 +75,7 @@
 
 														<input autocomplete="off" class="form-control" id="username" aria-describedby="usernameHelp"
 														type="text" name="username" required="">
-														<input autocomplete="off" type="hidden" name="redirect" value="{{redirect}}">
+														<input type="hidden" name="redirect" value="{{redirect}}">
 
 														<label for="password" class="mt-3">Password</label>
 
diff --git a/files/templates/login_2fa.html b/files/templates/login_2fa.html
index ba33cf9b4..ed48a82eb 100644
--- a/files/templates/login_2fa.html
+++ b/files/templates/login_2fa.html
@@ -62,11 +62,11 @@
 
 										<form action="/login" method="post" class="mt-md-3" id="login">
 
-												<input autocomplete="off" type="hidden" name="username" value="{{v.username}}">
-												<input autocomplete="off" type="hidden" name="redirect" value="{{redirect}}">
+												<input type="hidden" name="username" value="{{v.username}}">
+												<input type="hidden" name="redirect" value="{{redirect}}">
 
-												<input autocomplete="off" type="hidden" name="time" value="{{time}}">
-												<input autocomplete="off" type="hidden" name="hash" value="{{hash}}">
+												<input type="hidden" name="time" value="{{time}}">
+												<input type="hidden" name="hash" value="{{hash}}">
 
 												<label for="2fa_token" class="mt-3">Your verification code</label>
 
diff --git a/files/templates/oauth.html b/files/templates/oauth.html
index f7f123185..4a3c3fb98 100644
--- a/files/templates/oauth.html
+++ b/files/templates/oauth.html
@@ -25,12 +25,12 @@
 
 		<form action="/authorize" method="post" class="mt-md-3" id="login">
 
-				<input autocomplete="off" type="hidden" name="formkey" value="{{v.formkey}}">
-				<input autocomplete="off" type="hidden" name="scopes" value="{{scopes_txt}}">
-				<input autocomplete="off" type="hidden" name="redirect_uri" value="{{redirect_uri}}">
-				<input autocomplete="off" type="hidden" name="permanent" value="{{permanent}}">
-				<input autocomplete="off" type="hidden" name="client_id" value="{{application.client_id}}">
-				<input autocomplete="off" type="hidden" name="state" value="{{state}}">
+				<input type="hidden" name="formkey" value="{{v.formkey}}">
+				<input type="hidden" name="scopes" value="{{scopes_txt}}">
+				<input type="hidden" name="redirect_uri" value="{{redirect_uri}}">
+				<input type="hidden" name="permanent" value="{{permanent}}">
+				<input type="hidden" name="client_id" value="{{application.client_id}}">
+				<input type="hidden" name="state" value="{{state}}">
 
 				<input autocomplete="off" type="submit" class="btn btn-primary" id="auth_button" value="Authorize {{application.app_name}}">
 
diff --git a/files/templates/reset_password.html b/files/templates/reset_password.html
index d38f53231..ad5592faa 100644
--- a/files/templates/reset_password.html
+++ b/files/templates/reset_password.html
@@ -10,9 +10,9 @@
 
 														<form action="/reset" method="post" class="mt-3">
 
-				<input autocomplete="off" type="hidden" name="time" value="{{time}}">
-				<input autocomplete="off" type="hidden" name="user_id" value="{{v.id}}">
-				<input autocomplete="off" type="hidden" name="token" value="{{token}}">
+				<input type="hidden" name="time" value="{{time}}">
+				<input type="hidden" name="user_id" value="{{v.id}}">
+				<input type="hidden" name="token" value="{{token}}">
 
 																<label for="passentry" class="mt-3">New Password</label>
 
diff --git a/files/templates/settings.html b/files/templates/settings.html
index 9aaf03006..31668b966 100644
--- a/files/templates/settings.html
+++ b/files/templates/settings.html
@@ -177,8 +177,8 @@
 				{% if mfa_secret %}
 				<div>
 					<form action="/settings/security" method="post">
-						<input autocomplete="off" type="hidden" name="formkey" value="{{v.formkey}}">
-						<input autocomplete="off" type="hidden" name="2fa_secret" value="{{mfa_secret}}">
+						<input type="hidden" name="formkey" value="{{v.formkey}}">
+						<input type="hidden" name="2fa_secret" value="{{mfa_secret}}">
 						<div class="modal-body">
 							<p>
 								<span class="font-weight-bold">Step 1:</span> Scan this barcode (or enter the code) using a two-factor authentication app such as Google Authenticator or Authy.
@@ -206,8 +206,8 @@
 				{% else %}
 				<div>
 					<form action="/settings/security" method="post">
-						<input autocomplete="off" type="hidden" name="formkey" value="{{v.formkey}}">
-						<input autocomplete="off" type="hidden" name="2fa_secret" value="{{mfa_secret}}">
+						<input type="hidden" name="formkey" value="{{v.formkey}}">
+						<input type="hidden" name="2fa_secret" value="{{mfa_secret}}">
 						<div class="modal-body">
 
 							<div class="alert alert-warning" role="alert">
diff --git a/files/templates/settings_apps.html b/files/templates/settings_apps.html
index 0f98287f1..860054bd9 100644
--- a/files/templates/settings_apps.html
+++ b/files/templates/settings_apps.html
@@ -26,7 +26,7 @@
 								<label for="over18">{{app.app_name}}</label>
 						</div>
 						<div class="body w-lg-100">
-				<input autocomplete="off" type="hidden" name="formkey" value="{{v.formkey}}">
+				<input type="hidden" name="formkey" value="{{v.formkey}}">
 				<label for="edit-{{app.id}}-name" class="mb-0 w-lg-25">App Name</label>
 				<input autocomplete="off" id="edit-{{app.id}}-name" class="form-control" type="text" name="name" value="{{app.app_name}}">
 				
@@ -65,7 +65,7 @@
 								<label for="over18">{{app.app_name}}</label>
 						</div>
 						<div class="body w-lg-100">
-				<input autocomplete="off" type="hidden" name="formkey" value="{{v.formkey}}">
+				<input type="hidden" name="formkey" value="{{v.formkey}}">
 				<label for="edit-{{app.id}}-name" class="mb-0 w-lg-25">App Name</label>
 				<input autocomplete="off" id="edit-{{app.id}}-name" class="form-control" type="text" name="name" value="{{app.app_name}}">
 
@@ -102,7 +102,7 @@
 								<label for="over18">{{auth.application.app_name}}</label>
 						</div>
 						<div class="body w-lg-100">
-				<input autocomplete="off" type="hidden" name="formkey" value="{{v.formkey}}">
+				<input type="hidden" name="formkey" value="{{v.formkey}}">
 				<label class="mb-0 w-lg-25">Description</label>
 				<textarea autocomplete="off" class="form-control" name="description" maxlength="256" readonly="readonly">{{auth.application.description}}</textarea>
 			</div>
@@ -123,7 +123,7 @@
 	<div class="settings-section rounded">
 		<div class="d-lg-flex">
 			<div class="body w-lg-100">
-				<input autocomplete="off" type="hidden" name="formkey" value="{{v.formkey}}">
+				<input type="hidden" name="formkey" value="{{v.formkey}}">
 				<label for="form-username">Username</label>
 				<input autocomplete="off" type="text" id="form-username" class="form-control" name="username" value="{{v.username}}" readonly>
 				<label for="form-appname">Application Name</label>
diff --git a/files/templates/settings_blocks.html b/files/templates/settings_blocks.html
index 5d2afb238..b9c464ecb 100644
--- a/files/templates/settings_blocks.html
+++ b/files/templates/settings_blocks.html
@@ -103,7 +103,7 @@
 					</button>
 				</div>
 				<div class="modal-body">
-					<input autocomplete="off" type="hidden" name="formkey" value="{{v.formkey}}">
+					<input type="hidden" name="formkey" value="{{v.formkey}}">
 					<input autocomplete="off" type="text" name="username" placeholder="Enter username..." id="exile-username" class="form-control" maxlength=25 required>
 				</div>
 				<div class="modal-footer">
diff --git a/files/templates/settings_css.html b/files/templates/settings_css.html
index 8eb46b121..cffc00407 100644
--- a/files/templates/settings_css.html
+++ b/files/templates/settings_css.html
@@ -19,7 +19,7 @@
 			<div class="body d-lg-flex border-bottom">
 				<div class="w-lg-100">
 					<form id="profile-settings" action="/settings/css" method="post">
-						<input autocomplete="off" type="hidden" name="formkey" value="{{v.formkey}}">
+						<input type="hidden" name="formkey" value="{{v.formkey}}">
 						<textarea autocomplete="off" class="form-control rounded" id="bio-text" aria-label="With textarea" placeholder="Custom CSS" rows="50" name="css" form="profile-settings" maxlength="4000">{% if v.css %}{{v.csslazy}}{% endif %}</textarea>
 						<small>Limit of 4000 characters</small>
 						<div class="d-flex mt-2">
diff --git a/files/templates/settings_filters.html b/files/templates/settings_filters.html
index 2678b4598..d69b99a74 100644
--- a/files/templates/settings_filters.html
+++ b/files/templates/settings_filters.html
@@ -328,7 +328,7 @@
 
 						<div class="body w-lg-100">
 							<form id="custom-filter" action="/settings/filters" method="post">
-								<input autocomplete="off" type="hidden" name="formkey" value="{{v.formkey}}">
+								<input type="hidden" name="formkey" value="{{v.formkey}}">
 									<small>Hides matching posts from the frontpage and collapses matching comments.</small>
 								<div class="input-group mb-2">
 									<textarea autocomplete="off" class="form-control rounded" id="filters-text" aria-label="With textarea"
diff --git a/files/templates/settings_profile.html b/files/templates/settings_profile.html
index dfa689410..2815593fc 100644
--- a/files/templates/settings_profile.html
+++ b/files/templates/settings_profile.html
@@ -133,7 +133,7 @@
 				<div class="d-flex">
 
 					<form action="/settings/themecolor" id="themecolor-form" method="post" class="color-picker" style="line-height: 0">
-							<input autocomplete="off" type="hidden" name="formkey" value="{{v.formkey}}">
+							<input type="hidden" name="formkey" value="{{v.formkey}}">
 
 							{% for themecolor in COLORS %}
 							<input autocomplete="off" type="radio" name="themecolor" id="themecolor-{{themecolor}}" value="{{themecolor}}" {% if v.themecolor == themecolor %}checked{% endif %} onclick="document.getElementById('themecolor-form').submit()">
@@ -205,7 +205,7 @@
 
 							<div>
 								<form action="/settings/images/profile" method="post" enctype="multipart/form-data">
-									<input autocomplete="off" type="hidden" name="formkey" value="{{v.formkey}}">
+									<input type="hidden" name="formkey" value="{{v.formkey}}">
 									<label class="btn btn-secondary text-capitalize mr-2 mb-0">
 										Update<input autocomplete="off" type="file" accept="image/*" {% if request.headers.get('cf-ipcountry')=="T1" %}disabled{% endif %} hidden name="profile" onchange="form.submit()">
 									</label>
@@ -216,7 +216,7 @@
 							{% if v.profileurl %}
 							<div>
 								<form action="/settings/delete/profile" method="post">
-									<input autocomplete="off" type="hidden" name="formkey" value="{{v.formkey}}">
+									<input type="hidden" name="formkey" value="{{v.formkey}}">
 									<button type="submit" value="Delete" class="btn btn-link fa-lg"><i class="far fa-trash-alt text-danger"></i></button>
 								</form>
 							</div>
@@ -247,7 +247,7 @@
 
 							<div>
 								<form action="/settings/images/banner" method="post" enctype="multipart/form-data">
-									<input autocomplete="off" type="hidden" name="formkey" value="{{v.formkey}}">
+									<input type="hidden" name="formkey" value="{{v.formkey}}">
 									<label class="btn btn-secondary text-capitalize mr-2 mb-0">
 										Update<input autocomplete="off" type="file" {% if request.headers.get('cf-ipcountry')=="T1" %}disabled{% endif %} accept="image/*" hidden name="banner" onchange="form.submit()">
 									</label>
@@ -259,7 +259,7 @@
 
 								{% if v.bannerurl %}
 								<form action="/settings/delete/banner" method="post">
-									<input autocomplete="off" type="hidden" name="formkey" value="{{v.formkey}}">
+									<input type="hidden" name="formkey" value="{{v.formkey}}">
 									<button type="submit" value="Delete" class="btn btn-link fa-lg"><i class="far fa-trash-alt text-danger"></i></button>
 								</form>{% endif %}
 
@@ -326,7 +326,7 @@
 
 								{% if v.discord_id %}
 									<form action="/settings/remove_discord" method="post">
-									<input autocomplete="off" type="hidden" name="formkey" value="{{v.formkey}}">
+									<input type="hidden" name="formkey" value="{{v.formkey}}">
 									<input autocomplete="off" type="submit" class="btn btn-secondary text-capitalize mr-2 mb-0 mt-2" value="Disconnect Discord">
 									</form>
 
@@ -378,7 +378,7 @@
 									<p>Your original username will always stay reserved for you: <code>{{v.original_username}}</code></p>
 
 									<form action="/settings/name_change" method="post">
-										<input autocomplete="off" type="hidden" name="formkey" value="{{v.formkey}}">
+										<input type="hidden" name="formkey" value="{{v.formkey}}">
 										<input autocomplete="off" type="text" name="name" class="form-control" value="{{v.username}}">
 										<small>3-25 characters, including letters, numbers, _ , and -</small>
 										<div class="d-flex mt-2">
@@ -396,7 +396,7 @@
 									<p>Must be a youtube video link.</p>
 
 									<form action="/settings/song_change" method="post">
-										<input autocomplete="off" type="hidden" name="formkey" value="{{v.formkey}}">
+										<input type="hidden" name="formkey" value="{{v.formkey}}">
 										<input autocomplete="off" type="text" name="song" class="form-control" value="{% if v.song %}https://youtu.be/{{v.song}}{% endif %}" placeholder='Enter a youtube video link here'>
 										<br><small>In some browsers, users have to click at least once anywhere in the profile page for the anthem to play.</small>
 										<div class="d-flex mt-2">
@@ -413,7 +413,7 @@
 								<div class="d-flex">
 
 									<form action="/settings/namecolor" id="color-form" method="post" class="color-picker" style="line-height: 0">
-											<input autocomplete="off" type="hidden" name="formkey" value="{{v.formkey}}">
+											<input type="hidden" name="formkey" value="{{v.formkey}}">
 
 											{% for color in COLORS %}
 											<input autocomplete="off" type="radio" name="color" id="color-{{color}}" value="{{color}}" {% if v.namecolor == color %}checked{% endif %} onclick="document.getElementById('color-form').submit()">
@@ -435,7 +435,7 @@
 								<p class="text-small mb-2">Or type a color code:</p>
 								<div class="d-flex">
 								<form action="/settings/namecolor" id="color-code-form" method="post">
-									<input autocomplete="off" type="hidden" name="formkey" value="{{v.formkey}}">
+									<input type="hidden" name="formkey" value="{{v.formkey}}">
 									<input autocomplete="off" class="form-control" type="text" name="color" id="color-code" maxlength="6" value="{% if v.namecolor %}{{v.namecolor}}{% endif %}">
 									<label class="btn btn-secondary text-capitalize mr-2 mt-2 mb-0">Update<input autocomplete="off" type="text" for="color-code" onclick="form.submit()" hidden=""></label>
 								</form>
@@ -449,7 +449,7 @@
 								<div class="w-lg-100">
 
 									<form id="profile-settings" action="/settings/title_change" method="post">
-										<input autocomplete="off" type="hidden" name="formkey" value="{{v.formkey}}">
+										<input type="hidden" name="formkey" value="{{v.formkey}}">
 										<input maxlength=100 {% if v.flairchanged %}disabled{% endif %} autocomplete="off" id="customtitlebody" type="text" name="title" class="form-control" placeholder='Enter a flair here' value="{% if v.flairchanged %}Your flair has been locked until {{ti}}{% elif v.customtitleplain %}{{v.customtitleplain}}{% endif %}">
 										<div class="d-flex mt-2">
 											<a class="format" role="button"><i class="btn btn-secondary format d-inline-block m-0 fas fa-smile-beam" onclick="loadEmojis('customtitlebody')" aria-hidden="true" data-bs-toggle="modal" data-bs-target="#emojiModal" data-bs-toggle="tooltip" data-bs-placement="bottom"  title="Add Emoji"></i></a>
@@ -469,7 +469,7 @@
 								<div class="d-flex">
 
 									<form action="/settings/titlecolor" id="titlecolor-form" method="post" class="color-picker" style="line-height: 0">
-											<input autocomplete="off" type="hidden" name="formkey" value="{{v.formkey}}">
+											<input type="hidden" name="formkey" value="{{v.formkey}}">
 
 											{% for titlecolor in COLORS %}
 											<input autocomplete="off" type="radio" name="titlecolor" id="titlecolor-{{titlecolor}}" value="{{titlecolor}}" {% if v.titlecolor == titlecolor %}checked{% endif %} onclick="document.getElementById('titlecolor-form').submit()">
@@ -493,7 +493,7 @@
 								<p class="text-small mb-2">Or type a color code:</p>
 								<div class="d-flex">
 								<form action="/settings/titlecolor" id="color-code-form" method="post">
-									<input autocomplete="off" type="hidden" name="formkey" value="{{v.formkey}}">
+									<input type="hidden" name="formkey" value="{{v.formkey}}">
 									<input autocomplete="off" class="form-control" type="text" name="titlecolor" id="color-code" maxlength="6" value="{% if v.titlecolor %}{{v.titlecolor}}{% endif %}">
 									<label class="btn btn-secondary text-capitalize mr-2 mt-2 mb-0">Update<input autocomplete="off" type="text" for="color-code" onclick="form.submit()" hidden=""></label>
 								</form>
@@ -514,7 +514,7 @@
 									<div class="d-flex">
 		
 										<form action="/settings/verifiedcolor" id="verifiedcolor-form" method="post" class="color-picker" style="line-height: 0">
-												<input autocomplete="off" type="hidden" name="formkey" value="{{v.formkey}}">
+												<input type="hidden" name="formkey" value="{{v.formkey}}">
 		
 											{% for verifiedcolor in COLORS %}
 												<input autocomplete="off" type="radio" name="verifiedcolor" id="verifiedcolor-{{verifiedcolor}}" value="{{verifiedcolor}}" {% if v.verifiedcolor == verifiedcolor %}checked{% endif %} onclick="document.getElementById('verifiedcolor-form').submit()">
@@ -536,7 +536,7 @@
 									<p class="text-small mb-2">Or type a color code:</p>
 									<div class="d-flex">
 									<form action="/settings/verifiedcolor" id="color-code-form" method="post">
-										<input autocomplete="off" type="hidden" name="formkey" value="{{v.formkey}}">
+										<input type="hidden" name="formkey" value="{{v.formkey}}">
 										<input autocomplete="off" class="form-control" type="text" name="verifiedcolor" id="color-code" maxlength="6" value="{% if v.verifiedcolor %}{{v.verifiedcolor}}{% endif %}">
 										<label class="btn btn-secondary text-capitalize mr-2 mt-2 mb-0">Update<input autocomplete="off" type="text" for="color-code" onclick="form.submit()" hidden=""></label>
 									</form>
@@ -553,7 +553,7 @@
 
 								<div class="w-lg-100">						
 									<form id="profile-bio" action="/settings/profile" method="post" enctype="multipart/form-data">
-										<input autocomplete="off" type="hidden" name="formkey" value="{{v.formkey}}">
+										<input type="hidden" name="formkey" value="{{v.formkey}}">
 										<div class="input-group mb-2">
 											<textarea autocomplete="off"  id="bio-text" class="form-control rounded" aria-label="With textarea" placeholder="Tell the community a bit about yourself." rows="3" name="bio" form="profile-bio" maxlength="1500">{% if v.bio %}{{v.bio}}{% endif %}</textarea>
 										</div>
@@ -590,7 +590,7 @@
 							
 								<div class="w-lg-100">						
 									<form id="profile-friends" action="/settings/profile" method="post" enctype="multipart/form-data">
-										<input autocomplete="off" type="hidden" name="formkey" value="{{v.formkey}}">
+										<input type="hidden" name="formkey" value="{{v.formkey}}">
 										<div class="input-group mb-2">
 											<textarea autocomplete="off"  id="friends-text" class="form-control rounded" aria-label="With textarea" placeholder="Enter your friends on the site..." rows="3" name="friends" form="profile-friends" maxlength="1500">{% if v.friends %}{{v.friends}}{% endif %}</textarea>
 										</div>
@@ -611,7 +611,7 @@
 							
 								<div class="w-lg-100">						
 									<form id="profile-enemies" action="/settings/profile" method="post" enctype="multipart/form-data">
-										<input autocomplete="off" type="hidden" name="formkey" value="{{v.formkey}}">
+										<input type="hidden" name="formkey" value="{{v.formkey}}">
 										<div class="input-group mb-2">
 											<textarea autocomplete="off"  id="enemies-text" class="form-control rounded" aria-label="With textarea" placeholder="Enter your enemies on the site..." rows="3" name="enemies" form="profile-enemies" maxlength="1500">{% if v.enemies %}{{v.enemies}}{% endif %}</textarea>
 										</div>
@@ -632,7 +632,7 @@
 
 								<div class="w-lg-100">						
 									<form id="profile-sig" action="/settings/profile" method="post" enctype="multipart/form-data">
-										<input autocomplete="off" type="hidden" name="formkey" value="{{v.formkey}}">
+										<input type="hidden" name="formkey" value="{{v.formkey}}">
 										<div class="input-group mb-2">
 											<textarea autocomplete="off"  id="sig-text" class="form-control rounded" aria-label="With textarea" placeholder="Enter a signature..." rows="3" name="sig" form="profile-sig" maxlength="200">{% if v.sig %}{{v.sig}}{% endif %}</textarea>
 										</div>
diff --git a/files/templates/settings_profilecss.html b/files/templates/settings_profilecss.html
index 009728b14..506d5ae1d 100644
--- a/files/templates/settings_profilecss.html
+++ b/files/templates/settings_profilecss.html
@@ -19,7 +19,7 @@
 			<div class="body d-lg-flex border-bottom">
 				<div class="w-lg-100">
 					<form id="profile-settings" action="/settings/profilecss" method="post">
-						<input autocomplete="off" type="hidden" name="formkey" value="{{v.formkey}}">
+						<input type="hidden" name="formkey" value="{{v.formkey}}">
 						<textarea autocomplete="off" class="form-control rounded" id="bio-text" aria-label="With textarea" placeholder="Custom profile css" rows="50" name="profilecss" form="profile-settings" maxlength="4000">{% if v.profilecss %}{{v.profilecss}}{% endif %}</textarea>
 						<small>Limit of 4000 characters</small>
 						<div class="d-flex mt-2">
diff --git a/files/templates/settings_security.html b/files/templates/settings_security.html
index 751e8353e..76058b1a5 100644
--- a/files/templates/settings_security.html
+++ b/files/templates/settings_security.html
@@ -19,7 +19,7 @@
 		<p class="text-small text-muted">Change the email address used to sign in to your account.</p>
 		<div class="settings-section rounded">
 			<form	action="/settings/security" method="post">
-				<input autocomplete="off" type="hidden" name="formkey" value="{{v.formkey}}">
+				<input type="hidden" name="formkey" value="{{v.formkey}}">
 				<div class="body">
 					<div class="d-lg-flex">
 						<label for="new-email" class="w-lg-25">Email</label>
@@ -121,8 +121,8 @@
 
 		<div class="footer">
 
-			<input autocomplete="off" type="hidden" name="formkey" value="{{v.formkey}}">
-			<input autocomplete="off" type="hidden" name="now" value="1563891643">
+			<input type="hidden" name="formkey" value="{{v.formkey}}">
+			<input type="hidden" name="now" value="1563891643">
 
 			<div class="d-flex">
 
@@ -172,7 +172,7 @@
 <div class="settings-section rounded">
 
 <form	action="/settings/log_out_all_others" method="post">
-<input autocomplete="off" type="hidden" name="formkey" value="{{v.formkey}}">
+<input type="hidden" name="formkey" value="{{v.formkey}}">
 
 <div class="body">
 
@@ -229,7 +229,7 @@
 </div>
 <div class="" id="deleteFormContainer">
 	<form id="deleteAccountForm" method="post" action="/settings/delete_account">
-		<input autocomplete="off" type="hidden" name="formkey" value="{{v.formkey}}">
+		<input type="hidden" name="formkey" value="{{v.formkey}}">
 		<div class="modal-body body">
 
 			<div class="d-lg-flex">
diff --git a/files/templates/sign_up.html b/files/templates/sign_up.html
index f03765be9..a04d1abc7 100644
--- a/files/templates/sign_up.html
+++ b/files/templates/sign_up.html
@@ -73,12 +73,12 @@
 
 												{% if error %}<span class="text-danger">{{error}}</span><br>{% endif %}
 
-												<input autocomplete="off" type="hidden" name="formkey" value="{{formkey}}">
-												<input autocomplete="off" type="hidden" name="now" value="{{now}}">
+												<input type="hidden" name="formkey" value="{{formkey}}">
+												<input type="hidden" name="now" value="{{now}}">
 
-												{% if redirect %}<input autocomplete="off" type="hidden" name="redirect" value="{{redirect}}">{% endif %}
+												{% if redirect %}<input type="hidden" name="redirect" value="{{redirect}}">{% endif %}
 												{% if ref_user %}
-												<input autocomplete="off" type="hidden" name="referred_by" value="{{ref_user.id}}">{% endif %}
+												<input type="hidden" name="referred_by" value="{{ref_user.id}}">{% endif %}
 
 												<label for="username-register" class="mt-3">Username</label>
 
diff --git a/files/templates/sub/exilees.html b/files/templates/sub/exilees.html
index a78b96460..a64a93853 100644
--- a/files/templates/sub/exilees.html
+++ b/files/templates/sub/exilees.html
@@ -24,7 +24,7 @@
 		<td>
 			{% if v.mods(sub.name) %}
 				<form action="/h/{{sub.name}}/unexile/{{user.id}}" method="post">
-					<input autocomplete="off" type="hidden" name="formkey" value="{{v.formkey}}">
+					<input type="hidden" name="formkey" value="{{v.formkey}}">
 					<input class="btn btn-primary" style="margin-top:-5px" autocomplete="off" class="btn btn-primary ml-auto" type="submit" value="Unexile">
 				</form>
 			{% endif %}
diff --git a/files/templates/sub/mods.html b/files/templates/sub/mods.html
index 3fe3eafa7..d22278c40 100644
--- a/files/templates/sub/mods.html
+++ b/files/templates/sub/mods.html
@@ -23,8 +23,8 @@
 		<td>
 			{% if v.id == user.id or v.mod_date(sub.name) and v.mod_date(sub.name) < mod.created_utc %}
 				<form action="/h/{{sub.name}}/remove_mod" method="post">
-					<input autocomplete="off" type="hidden" name="formkey" value="{{v.formkey}}">
-					<input autocomplete="off" type="hidden" name="uid" value="{{user.id}}">
+					<input type="hidden" name="formkey" value="{{v.formkey}}">
+					<input type="hidden" name="uid" value="{{user.id}}">
 					<input class="btn btn-primary" style="margin-top:-5px" autocomplete="off" class="btn btn-primary ml-auto" type="submit" value="{% if v.id == user.id %}Resign{% else %}Remove Mod{% endif %}">
 				</form>
 			{% endif %}
@@ -36,7 +36,7 @@
 
 {% if v.mods(sub.name) %}
 	<form action="/h/{{sub.name}}/add_mod" method="post">
-		<input autocomplete="off" type="hidden" name="formkey" value="{{v.formkey}}">
+		<input type="hidden" name="formkey" value="{{v.formkey}}">
 		<input class="form-control" style="display:inline;width:250px" autocomplete="off" type="text" name="user" class="form-control" placeholder="Enter username..">
 		<input class="btn btn-primary" style="margin-top:-5px" autocomplete="off" class="btn btn-primary ml-auto" type="submit" value="Add Mod">
 	</form>
diff --git a/files/templates/sub/settings.html b/files/templates/sub/settings.html
index 8434e544f..ee12498a9 100644
--- a/files/templates/sub/settings.html
+++ b/files/templates/sub/settings.html
@@ -32,7 +32,7 @@
 
 				<div>
 					<form action="/h/{{sub.name}}/sidebar_image" method="post" enctype="multipart/form-data">
-						<input autocomplete="off" type="hidden" name="formkey" value="{{v.formkey}}">
+						<input type="hidden" name="formkey" value="{{v.formkey}}">
 						<label class="btn btn-secondary text-capitalize mr-2 mb-0">
 							Update<input autocomplete="off" type="file" accept="image/*" {% if request.headers.get('cf-ipcountry')=="T1" %}disabled{% endif %} hidden name="sidebar" onchange="form.submit()">
 						</label>
@@ -68,7 +68,7 @@
 
 				<div>
 					<form action="/h/{{sub.name}}/banner" method="post" enctype="multipart/form-data">
-						<input autocomplete="off" type="hidden" name="formkey" value="{{v.formkey}}">
+						<input type="hidden" name="formkey" value="{{v.formkey}}">
 						<label class="btn btn-secondary text-capitalize mr-2 mb-0">
 							Update<input autocomplete="off" type="file" {% if request.headers.get('cf-ipcountry')=="T1" %}disabled{% endif %} accept="image/*" hidden name="banner" onchange="form.submit()">
 						</label>
@@ -98,7 +98,7 @@
 			<div class="body d-lg-flex">
 				<div class="w-lg-100">
 					<form id="sidebar" action="/h/{{sub.name}}/sidebar" method="post">
-						<input autocomplete="off" type="hidden" name="formkey" value="{{v.formkey}}">
+						<input type="hidden" name="formkey" value="{{v.formkey}}">
 						<textarea autocomplete="off" maxlength="500" class="form-control rounded" id="bio-text" aria-label="With textarea" placeholder="Enter sidebar here..." rows="10" name="sidebar" form="sidebar">{% if sub.sidebar %}{{sub.sidebar}}{% endif %}</textarea>
 
 						<div class="d-flex mt-2">
@@ -123,7 +123,7 @@
 			<div class="body d-lg-flex">
 				<div class="w-lg-100">
 					<form id="css" action="/h/{{sub.name}}/css" method="post">
-						<input autocomplete="off" type="hidden" name="formkey" value="{{v.formkey}}">
+						<input type="hidden" name="formkey" value="{{v.formkey}}">
 						<textarea autocomplete="off" maxlength="4000" class="form-control rounded" id="bio-text" aria-label="With textarea" placeholder="Enter css here..." rows="10" name="css" form="css">{% if sub.css %}{{sub.css}}{% endif %}</textarea>
 
 						<div class="d-flex mt-2">
diff --git a/files/templates/submission.html b/files/templates/submission.html
index 217e9eb7d..91ebb017f 100644
--- a/files/templates/submission.html
+++ b/files/templates/submission.html
@@ -737,8 +737,8 @@
 						<div id="edit-post-body-{{p.id}}" class="d-none comment-write collapsed child">
 							<form id="post-edit-form-{{p.id}}" action="/edit_post/{{p.id}}" method="post" enctype="multipart/form-data">
 								<div class="d-flex flex-column">
-									<input autocomplete="off" type="hidden" name="formkey" value="{{v.formkey}}">
-									<input autocomplete="off" type="hidden" name="current_page" value="{{request.path}}">
+									<input type="hidden" name="formkey" value="{{v.formkey}}">
+									<input type="hidden" name="current_page" value="{{request.path}}">
 									<textarea autocomplete="off" max-length="500" name="title" class="comment-box form-control rounded" required placeholder="title">{{p.title}}</textarea>
 									<textarea autocomplete="off" name="body" {% if v.longpost %}minlength="280"{% endif %} maxlength="{% if v.bird %}140{% else %}20000{% endif %}" oninput="markdown('post-edit-box-{{p.id}}', 'post-edit-{{p.id}}');charLimit('post-edit-box-{{p.id}}','charcount-post-edit')" id="post-edit-box-{{p.id}}" form="post-edit-form-{{p.id}}" class="comment-box form-control rounded" aria-label="With textarea" placeholder="Add text to your post..." rows="10" data-id="{{p.id}}">{{p.body}}</textarea> 
 									
@@ -928,8 +928,8 @@
 
 	<div id="comment-form-space-{{p.fullname}}" class="comment-write mb-3">
 		<form id="reply-to-{{p.fullname}}" action="/comment" method="post">
-			<input autocomplete="off" type="hidden" name="formkey" value="{{v.formkey}}">
-			<input autocomplete="off" type="hidden" name="parent_fullname" value="t2_{{p.id}}">
+			<input type="hidden" name="formkey" value="{{v.formkey}}">
+			<input type="hidden" name="parent_fullname" value="t2_{{p.id}}">
 			<input autocomplete="off" id="reply-form-submission-{{p.fullname}}" type="hidden" name="submission" value="{{p.id}}">
 			{% if v %}
 			<textarea autocomplete="off" {% if not (p and p.id in ADMIGGERS) %}{% if v.longpost %}minlength="280"{% elif v.bird %}maxlength="140"{% endif %}{% endif %} maxlength="10000" oninput="markdown('reply-form-body-{{p.fullname}}', 'form-preview-{{p.id}}');charLimit('reply-form-body-{{p.fullname}}','charcount-reply')" id="reply-form-body-{{p.fullname}}" data-fullname="{{p.fullname}}" class="comment-box form-control rounded" id="comment-form" name="body" form="reply-to-{{p.fullname}}" aria-label="With textarea" placeholder="Add your comment..." rows="3"></textarea>
diff --git a/files/templates/submit.html b/files/templates/submit.html
index e7a0f8f85..746031b80 100644
--- a/files/templates/submit.html
+++ b/files/templates/submit.html
@@ -77,7 +77,7 @@
 
 										<div class="body">
 
-												<input autocomplete="off" type="hidden" name="formkey" value="{{v.formkey}}">
+												<input type="hidden" name="formkey" value="{{v.formkey}}">
 
 												<label class='mt-4' for="title">Hole</label>
 
diff --git a/files/templates/userpage.html b/files/templates/userpage.html
index f7130e560..a619ff1b7 100644
--- a/files/templates/userpage.html
+++ b/files/templates/userpage.html
@@ -190,7 +190,7 @@
 						{% endif %}
 
 						<form class="d-none toggleable" id="message" action="/@{{u.username}}/message" onsubmit="submitFormAjax(event)">
-							<input autocomplete="off" type="hidden" name="formkey" value="{{v.formkey}}"> 
+							<input type="hidden" name="formkey" value="{{v.formkey}}"> 
 							<pre></pre>
 							<textarea autocomplete="off" id="input-message" form="message" name="message" rows="3" minlength="1" maxlength="10000" class="form-control b2" oninput="markdown('input-message', 'message-preview')" required></textarea>
 							<pre></pre>
@@ -234,7 +234,7 @@
 							<div class="w-lg-100">
 
 								<form action="/admin/title_change/{{u.id}}" method="post">
-									<input autocomplete="off" type="hidden" name="formkey" value="{{v.formkey}}">
+									<input type="hidden" name="formkey" value="{{v.formkey}}">
 									<input maxlength=100 autocomplete="off" id="customtitlebody" type="text" name="title" class="form-control" placeholder='Enter a flair here' value="{% if u.customtitleplain %}{{u.customtitleplain}}{% endif %}">
 									<div class="d-flex mt-2">
 										<a class="format" role="button"><i class="btn btn-secondary format d-inline-block m-0 fas fa-smile-beam" onclick="loadEmojis('customtitlebody')" aria-hidden="true" data-bs-toggle="modal" data-bs-target="#emojiModal" data-bs-toggle="tooltip" data-bs-placement="bottom"  title="Add Emoji"></i></a>
@@ -253,14 +253,14 @@
 						<pre></pre>
 						{% if u.is_suspended %}
 							<form action="/unban_user/{{u.id}}/" method="post" action="">
-								<input autocomplete="off" type="hidden" name="formkey" value="{{v.formkey}}">
-								<input autocomplete="off" type="hidden" name="redir" value="true">
+								<input type="hidden" name="formkey" value="{{v.formkey}}">
+								<input type="hidden" name="redir" value="true">
 								<input autocomplete="off" type="submit" class="btn btn-success" value="Unban user">
 							</form>
 						{% else %}
 							<form action="/ban_user/{{u.id}}" method="post" action="">
-								<input autocomplete="off" type="hidden" name="formkey" value="{{v.formkey}}">
-								<input autocomplete="off" type="hidden" name="redir" value="true">
+								<input type="hidden" name="formkey" value="{{v.formkey}}">
+								<input type="hidden" name="redir" value="true">
 								<input autocomplete="off" style="font-size:11px" type="text" class="form-control" name="reason" placeholder="Ban Reason" oninput="document.getElementById('user-ban-submit').disabled=false">
 								<input autocomplete="off" style="font-size:11px" type="number" step="any" class="form-control" name="days" placeholder="Days (blank = permanent)">
 								<div class="custom-control custom-checkbox">
@@ -273,7 +273,7 @@
 						<pre></pre>
 
 						<form id="agendaposter1" class="{% if u.agendaposter %}d-none{% endif %}" action="/agendaposter/{{u.id}}" method="post">
-							<input autocomplete="off" type="hidden" name="formkey", value="{{v.formkey}}">
+							<input type="hidden" name="formkey", value="{{v.formkey}}">
 							<input autocomplete="off" type="number" step="any" name="days" class="form-control" placeholder="Days (0 or blank = permanent)">
 							<input autocomplete="off" type="submit" class="btn btn-danger" value="Lock Chud Theme">
 						</form>
@@ -295,14 +295,14 @@
 
 						<pre></pre>
 						<form action="/admin/unnuke_user" method="post">
-							<input autocomplete="off" type="hidden" name="formkey", value="{{v.formkey}}">
-							<input autocomplete="off" type="hidden" name="user" value="{{u.username}}">
+							<input type="hidden" name="formkey", value="{{v.formkey}}">
+							<input type="hidden" name="user" value="{{u.username}}">
 							<input autocomplete="off" type="submit" class="btn btn-success" value="Approve User's Content">
 						</form>
 						<pre></pre>
 						<form action="/admin/nuke_user" method="post">
-							<input autocomplete="off" type="hidden" name="formkey", value="{{v.formkey}}">
-							<input autocomplete="off" type="hidden" name="user" value="{{u.username}}">
+							<input type="hidden" name="formkey", value="{{v.formkey}}">
+							<input type="hidden" name="user" value="{{u.username}}">
 							<input autocomplete="off" type="submit" class="btn btn-danger" value="Remove User's Content">
 						</form>
 						<pre></pre>
@@ -501,7 +501,7 @@
 
 					<form class="d-none toggleable" id='message-mobile' action="/@{{u.username}}/message" onsubmit="submitFormAjax(event)">
 						<pre></pre>
-						<input autocomplete="off" type="hidden" name="formkey" value="{{v.formkey}}"> 
+						<input type="hidden" name="formkey" value="{{v.formkey}}"> 
 						<textarea autocomplete="off" id="input-message-mobile" form="message-mobile" name="message" rows="3" minlength="1" maxlength="10000" class="form-control" oninput="markdown('input-message-mobile', 'message-preview-mobile')" required></textarea>
 						<pre></pre>
 						<pre class="btn btn-secondary format d-inline-block m-0 fas fa-bold" aria-hidden="true" onclick="makeBold('input-message-mobile')" data-bs-toggle="tooltip" data-bs-placement="bottom" title="Bold"></pre>
@@ -540,7 +540,7 @@
 							<div class="w-lg-100">
 
 								<form action="/admin/title_change/{{u.id}}" method="post">
-									<input autocomplete="off" type="hidden" name="formkey" value="{{v.formkey}}">
+									<input type="hidden" name="formkey" value="{{v.formkey}}">
 									<input maxlength=100 autocomplete="off" id="customtitlebody-mobile" type="text" name="title" class="form-control" placeholder='Enter a flair here' value="{% if u.customtitleplain %}{{u.customtitleplain}}{% endif %}">
 									<div class="d-flex mt-2">
 										<a class="format" role="button"><i class="btn btn-secondary format d-inline-block m-0 fas fa-smile-beam" onclick="loadEmojis('customtitlebody-mobile')" aria-hidden="true" data-bs-toggle="modal" data-bs-target="#emojiModal" data-bs-toggle="tooltip" data-bs-placement="bottom"  title="Add Emoji"></i></a>
@@ -559,14 +559,14 @@
 						<pre></pre>
 						{% if u.is_suspended %}
 							<form action="/unban_user/{{u.id}}" method="post">
-								<input autocomplete="off" type="hidden" name="formkey", value="{{v.formkey}}">
-								<input autocomplete="off" type="hidden" name="redir" value="true">
+								<input type="hidden" name="formkey", value="{{v.formkey}}">
+								<input type="hidden" name="redir" value="true">
 								<input autocomplete="off" type="submit" class="btn btn-success" value="Unban user">
 							</form>
 						{% else %}
 							<form action="/ban_user/{{u.id}}/" method="post">
-								<input autocomplete="off" type="hidden" name="formkey" value="{{v.formkey}}">
-								<input autocomplete="off" type="hidden" name="redir" value="true">
+								<input type="hidden" name="formkey" value="{{v.formkey}}">
+								<input type="hidden" name="redir" value="true">
 								<input autocomplete="off" style="font-size:11px" type="text" class="form-control" name="reason" placeholder="Ban Reason" oninput="document.getElementById('user-ban-submit2').disabled=false">
 								<input autocomplete="off" style="font-size:11px" type="number" step="any" class="form-control" name="days" placeholder="Days (blank = permanent)">
 								<br >
@@ -581,7 +581,7 @@
 						<pre></pre>
 
 						<form id="agendaposter2" class="{% if u.agendaposter %}d-none{% endif %}" action="/agendaposter/{{u.id}}" method="post">
-							<input autocomplete="off" type="hidden" name="formkey", value="{{v.formkey}}">
+							<input type="hidden" name="formkey", value="{{v.formkey}}">
 							<input autocomplete="off" type="number" step="any" name="days" class="form-control" placeholder="Days (0 or blank = permanent)">
 							<input autocomplete="off" type="submit" class="btn btn-danger" value="Lock Chud Theme">
 						</form>
@@ -603,14 +603,14 @@
 
 						<pre></pre>
 						<form action="/admin/unnuke_user" method="post">
-							<input autocomplete="off" type="hidden" name="formkey", value="{{v.formkey}}">
-							<input autocomplete="off" type="hidden" name="user" value="{{u.username}}">
+							<input type="hidden" name="formkey", value="{{v.formkey}}">
+							<input type="hidden" name="user" value="{{u.username}}">
 							<input autocomplete="off" type="submit" class="btn btn-success" value="Approve User's Content">
 						</form>
 						<pre></pre>
 						<form action="/admin/nuke_user" method="post">
-							<input autocomplete="off" type="hidden" name="formkey", value="{{v.formkey}}">
-							<input autocomplete="off" type="hidden" name="user" value="{{u.username}}">
+							<input type="hidden" name="formkey", value="{{v.formkey}}">
+							<input type="hidden" name="user" value="{{u.username}}">
 							<input autocomplete="off" type="submit" class="btn btn-danger" value="Remove User's Content">
 						</form>
 					{% endif %}