diff options
| author | friendica <info@friendica.com> | 2012-03-18 17:54:12 -0700 |
|---|---|---|
| committer | friendica <info@friendica.com> | 2012-03-18 17:54:12 -0700 |
| commit | c286681158a5c766d740f66cc70d1ef95c34b92a (patch) | |
| tree | dc385ee21f8f0f55fe79984b68422d3f7a0007b4 /view | |
| parent | 6aab641bfdbe958d8d292908fa8d84de13490d06 (diff) | |
| parent | 453b5b46a370e3f01f2c948ac3eddf0bcd82c741 (diff) | |
| download | volse-hubzilla-c286681158a5c766d740f66cc70d1ef95c34b92a.tar.gz volse-hubzilla-c286681158a5c766d740f66cc70d1ef95c34b92a.tar.bz2 volse-hubzilla-c286681158a5c766d740f66cc70d1ef95c34b92a.zip | |
Merge pull request #147 from CatoTH/master
CSRF-Protection in the group-related form
Diffstat (limited to 'view')
| -rwxr-xr-x | view/group_drop.tpl | 2 | ||||
| -rwxr-xr-x | view/group_edit.tpl | 1 |
2 files changed, 2 insertions, 1 deletions
diff --git a/view/group_drop.tpl b/view/group_drop.tpl index cbae1610f..2cbebbb8e 100755 --- a/view/group_drop.tpl +++ b/view/group_drop.tpl @@ -1,5 +1,5 @@ <div class="group-delete-wrapper button" id="group-delete-wrapper-$id" > - <a href="group/drop/$id" + <a href="group/drop/$id?t=$form_security_token" onclick="return confirmDelete();" id="group-delete-icon-$id" class="icon drophide group-delete-icon" diff --git a/view/group_edit.tpl b/view/group_edit.tpl index 3689db753..2fa2b1a55 100755 --- a/view/group_edit.tpl +++ b/view/group_edit.tpl @@ -3,6 +3,7 @@ <div id="group-edit-wrapper" > <form action="group/$gid" id="group-edit-form" method="post" > + <input type='hidden' name='form_security_token' value='$form_security_token'> {{ inc field_input.tpl with $field=$gname }}{{ endinc }} {{ if $drop }}$drop{{ endif }} |