diff --git a/application/admin/model/AdminLog.php b/application/admin/model/AdminLog.php
index 5f951129b58d364a6cbf1b728126146e2fecd6cc..3254e4d5d814ef015e7be17d79c1eabad665263b 100644
--- a/application/admin/model/AdminLog.php
+++ b/application/admin/model/AdminLog.php
@@ -37,7 +37,7 @@ class AdminLog extends Model
         if (!$content) {
             $content = request()->param();
             foreach ($content as $k => $v) {
-                if (is_string($v) && strlen($v) > 200 || stripos($k, 'password') !== false) {
+                if (is_string($v) && strlen($v) > 200 || stripos($k, 'password') !== false || is_array($v) || is_object($v)) {
                     unset($content[$k]);
                 }
             }
diff --git a/application/index/view/user/login.html b/application/index/view/user/login.html
old mode 100755
new mode 100644
index ff2af389e298e715d86fd2e6e8438d59ff8c67ea..51999943db3a2043f595b58162ac33bcc5583a69
--- a/application/index/view/user/login.html
+++ b/application/index/view/user/login.html
@@ -73,7 +73,7 @@
             <div class="form-group">
                 <label for="newpassword" class="control-label col-xs-12 col-sm-3">{:__('New password')}:</label>
                 <div class="col-xs-12 col-sm-8">
-                    <input type="password" class="form-control" id="newpassword" name="newpassword" value="" data-rule="required;password" placeholder="">
+                    <input type="password" class="form-control" id="newpassword" name="newpassword" value="" data-rule="required;password" placeholder="新密码" autocomplete="new-password">
                     <span class="msg-box"></span>
                 </div>
             </div>
diff --git a/public/assets/js/fast.js b/public/assets/js/fast.js
index 388ebddd05697765ef1ab5bfbff4d2dd59e0a5d7..f2df1d48d21499db21732d0b7e27c2e99583beae 100644
--- a/public/assets/js/fast.js
+++ b/public/assets/js/fast.js
@@ -68,6 +68,9 @@ define(['jquery', 'bootstrap', 'toastr', 'layer', 'lang'], function ($, undefine
                 options = $.extend({
                     type: "POST",
                     dataType: "json",
+                    xhrFields: {
+                        withCredentials: true
+                    },
                     success: function (ret) {
                         index && Layer.close(index);
                         ret = Fast.events.onAjaxResponse(ret);