From 61efcda114414f2c35c1993c75bc95909282017f Mon Sep 17 00:00:00 2001
From: Christopher Smith <chris@jalakai.co.uk>
Date: Tue, 19 Feb 2013 00:13:25 +0000
Subject: add security token back, but not for anonymous users

---
 inc/template.php | 3 +++
 1 file changed, 3 insertions(+)

(limited to 'inc/template.php')

diff --git a/inc/template.php b/inc/template.php
index 1734b08a0..4bfc3f572 100644
--- a/inc/template.php
+++ b/inc/template.php
@@ -1377,6 +1377,9 @@ function tpl_actiondropdown($empty = '', $button = '&gt;') {
     echo '<div class="no">';
     echo '<input type="hidden" name="id" value="'.$ID.'" />';
     if($REV) echo '<input type="hidden" name="rev" value="'.$REV.'" />';
+    if ($_SERVER['REMOTE_USER']) {
+        echo '<input type="hidden" name="sectok" value="'.getSecurityToken().'" />';
+    }
 
     echo '<select name="do" class="edit quickselect" title="'.$lang['tools'].'">';
     echo '<option value="">'.$empty.'</option>';
-- 
cgit v1.2.3