diff --git a/.DS_Store b/.DS_Store
new file mode 100644
index 0000000..7b9e339
Binary files /dev/null and b/.DS_Store differ
diff --git a/README.md b/README.md
index ec92598..fb70948 100644
--- a/README.md
+++ b/README.md
@@ -181,4 +181,14 @@ Demo video link: https://b23.tv/QuB77m
 Bug report: http://118.25.96.118/bugzilla/show_bug.cgi?id=215
 
 
+
+### 丁锐
+
+修复了以下漏洞
+
+漏洞：新用户在创建账号时，不需要输入确定密码也可以注册成功，并且新账户可以正常使用。
+
+Bug report:http://118.25.96.118/bugzilla/show_bug.cgi?id=489
+
+
 *Last modified on 2021-10-17*
\ No newline at end of file
diff --git a/app/templates/signup.html b/app/templates/signup.html
index f7bd69f..1fd05f0 100644
--- a/app/templates/signup.html
+++ b/app/templates/signup.html
@@ -17,8 +17,8 @@ You're logged in already! <a href="/logout">Logout</a>.
 
   <form action="/signup" method="POST">
     <p><input type="username" name="username" placeholder="输入用户名" required="required" class="username"></p>
-    <p><input type="password" name="password" placeholder="输入密码" class="password"></p>
-    <p><input type="password" name="password2" placeholder="确认密码" class="password"></p>
+    <p><input type="password" name="password" placeholder="输入密码" required="required" class="password"></p>
+    <p><input type="password" name="password2" placeholder="确认密码" required="required" class="password" ></p>
     <button type="submit" class="btn">注册</button>
   </form>