diff options
| author | Christopher Smith <chris@jalakai.co.uk> | 2013-02-19 00:13:25 +0000 |
|---|---|---|
| committer | Christopher Smith <chris@jalakai.co.uk> | 2013-02-24 12:39:01 +0000 |
| commit | 6acc112bae4de62d04c4b4aeea8e0768b7fc4d0e (patch) | |
| tree | 9df61f2648d5917b65242e3b8c1b39e28cbc525b /inc | |
| parent | f2cf18dae6f9e86142c9c20294266562f69fe641 (diff) | |
| download | rpg-6acc112bae4de62d04c4b4aeea8e0768b7fc4d0e.tar.gz rpg-6acc112bae4de62d04c4b4aeea8e0768b7fc4d0e.tar.bz2 | |
add security token back, but not for anonymous users
Diffstat (limited to 'inc')
| -rw-r--r-- | inc/template.php | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/inc/template.php b/inc/template.php index 1734b08a0..4bfc3f572 100644 --- a/inc/template.php +++ b/inc/template.php @@ -1377,6 +1377,9 @@ function tpl_actiondropdown($empty = '', $button = '>') { echo '<div class="no">'; echo '<input type="hidden" name="id" value="'.$ID.'" />'; if($REV) echo '<input type="hidden" name="rev" value="'.$REV.'" />'; + if ($_SERVER['REMOTE_USER']) { + echo '<input type="hidden" name="sectok" value="'.getSecurityToken().'" />'; + } echo '<select name="do" class="edit quickselect" title="'.$lang['tools'].'">'; echo '<option value="">'.$empty.'</option>'; |