diff options
author | 2008-11-17 14:24:44 +0000 | |
---|---|---|
committer | 2008-11-17 14:24:44 +0000 | |
commit | 54991bce619b2840452594e8a78004b7389445ed (patch) | |
tree | b6704c154f80e8e1663ad891856cfc9f90182086 /templates | |
parent | 60b9c2c903f88e5c32e43dfbbe04679513d835ee (diff) | |
download | scuttle-54991bce619b2840452594e8a78004b7389445ed.tar.gz scuttle-54991bce619b2840452594e8a78004b7389445ed.zip |
Bug fix: prevent from CSRF vulnerabilities on profile page (thank you Etienne Z.)
git-svn-id: https://semanticscuttle.svn.sourceforge.net/svnroot/semanticscuttle/trunk@164 b3834d28-1941-0410-a4f8-b48e95affb8f
Diffstat (limited to 'templates')
-rw-r--r-- | templates/editprofile.tpl.php | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/templates/editprofile.tpl.php b/templates/editprofile.tpl.php index a38dbd8..055aab0 100644 --- a/templates/editprofile.tpl.php +++ b/templates/editprofile.tpl.php @@ -3,6 +3,7 @@ $this->includeTemplate($GLOBALS['top_include']); ?> <form action="<?php echo $formaction; ?>" method="post"> +<input type="hidden" name="token" value="<?php echo $token; ?>"> </table> |