} else {
// confirm if some queries exist (against GET CSRF)
include XOOPS_ROOT_PATH . '/header.php' ;
echo '
<div class="confirmMsg">
<h4>'._LOGIN.'</h4>
<form method="post" action="'.XOOPS_URL.'/user.php?op=login">
<input type="hidden" name="xoops_redirect" value="'.htmlspecialchars( $GLOBALS['xoopsRequestUri'], ENT_QUOTES ).'" />' ;
echo $GLOBALS['xoopsSecurity']->getTokenHTML();
echo '
<input type="submit" name="confirm_submit" value="'._GO.'" />
</form>
</div>';
include XOOPS_ROOT_PATH . '/footer.php' ;
exit ;
}