FressRSS/app/views/auth/formLogin.phtml

<div class="prompt">
	<h1><?= _t('gen.auth.login') ?></h1>

	<?php if (!max_registrations_reached()) { ?>
		<a href="<?= _url('auth', 'register') ?>"><?= _t('gen.auth.registration.ask') ?></a>
	<?php } ?>

	<form id="crypto-form" method="post" action="<?= _url('auth', 'login') ?>">
		<input type="hidden" name="_csrf" value="<?= FreshRSS_Auth::csrfToken() ?>" />

		<div class="form-group">
			<label for="username"><?= _t('gen.auth.username') ?></label>
			<input type="text" id="username" name="username" autocomplete="username" size="16" required="required" pattern="<?= FreshRSS_user_Controller::USERNAME_PATTERN ?>" autofocus="autofocus" autocapitalize="off" />
		</div>

		<div class="form-group">
			<label for="passwordPlain"><?= _t('gen.auth.password') ?></label>
			<div class="stick">
				<input type="password" id="passwordPlain" required="required" />
				<a class="btn toggle-password" data-toggle="passwordPlain"><?= _i('key') ?></a>
			</div>
			<input type="hidden" id="challenge" name="challenge" />
			<noscript><strong><?= _t('gen.js.should_be_activated') ?></strong></noscript>
		</div>

		<div class="form-group">
			<label class="checkbox" for="keep_logged_in">
				<input type="checkbox" name="keep_logged_in" id="keep_logged_in" value="1" />
				<?= _t('gen.auth.keep_logged_in', $this->cookie_days) ?>
			</label>
		</div>

		<div class="form-group form-group-actions">
			<button id="loginButton" type="submit" class="btn btn-important" disabled="disabled">
				<?= _t('gen.auth.login') ?>
			</button>
		</div>
	</form>

	<p><a href="<?= _url('index', 'about') ?>"><?= _t('gen.freshrss.about') ?></a></p>
</div>