diff options
| author | Christopher Smith <chris@jalakai.co.uk> | 2013-02-19 00:13:25 +0000 |
|---|---|---|
| committer | Christopher Smith <chris@jalakai.co.uk> | 2013-02-19 00:13:25 +0000 |
| commit | 61efcda114414f2c35c1993c75bc95909282017f (patch) | |
| tree | 9d29ef057a247ed4cfadfdef8c8e81e7dd695948 | |
| parent | a02e0d0ea02e11f105aeb3b9cc4dabdd5a1bc217 (diff) | |
| download | rpg-61efcda114414f2c35c1993c75bc95909282017f.tar.gz rpg-61efcda114414f2c35c1993c75bc95909282017f.tar.bz2 | |
add security token back, but not for anonymous users
| -rw-r--r-- | inc/template.php | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/inc/template.php b/inc/template.php index 1734b08a0..4bfc3f572 100644 --- a/inc/template.php +++ b/inc/template.php @@ -1377,6 +1377,9 @@ function tpl_actiondropdown($empty = '', $button = '>') { echo '<div class="no">'; echo '<input type="hidden" name="id" value="'.$ID.'" />'; if($REV) echo '<input type="hidden" name="rev" value="'.$REV.'" />'; + if ($_SERVER['REMOTE_USER']) { + echo '<input type="hidden" name="sectok" value="'.getSecurityToken().'" />'; + } echo '<select name="do" class="edit quickselect" title="'.$lang['tools'].'">'; echo '<option value="">'.$empty.'</option>'; |