Hotels_Server Password disclosure

Hotels_Server /view/login.php  Enter user name unauthenticated user get password
login.php post data to doAction.php  user name unauthenticated user get password
code:
![2](https://user-images.githubusercontent.com/102706674/160961567-aebb202b-4efb-4508-a7be-d1bc03cd8616.PNG)

![2](https://user-images.githubusercontent.com/102706674/160961225-4232dca6-e03c-465e-8efd-29f03576d537.png)
