diff options
| -rw-r--r-- | classes/dlg.php | 1 | ||||
| -rw-r--r-- | classes/pref_filters.php | 1 |
2 files changed, 2 insertions, 0 deletions
diff --git a/classes/dlg.php b/classes/dlg.php index a72683ef3..33295b904 100644 --- a/classes/dlg.php +++ b/classes/dlg.php @@ -417,6 +417,7 @@ class Dlg extends Protected_Handler { print "<input dojoType=\"dijit.form.TextBox\" style=\"display : none\" name=\"op\" value=\"pref-filters\">"; print "<input dojoType=\"dijit.form.TextBox\" style=\"display : none\" name=\"quiet\" value=\"1\">"; print "<input dojoType=\"dijit.form.TextBox\" style=\"display : none\" name=\"method\" value=\"add\">"; + print "<input dojoType=\"dijit.form.TextBox\" style=\"display : none\" name=\"csrf_token\" value=\"".$_SESSION['csrf_token']."\">"; $result = db_query($this->link, "SELECT id,description FROM ttrss_filter_types ORDER BY description"); diff --git a/classes/pref_filters.php b/classes/pref_filters.php index 4ab12410f..e627ed2c8 100644 --- a/classes/pref_filters.php +++ b/classes/pref_filters.php @@ -209,6 +209,7 @@ class Pref_Filters extends Protected_Handler { print "<input dojoType=\"dijit.form.TextBox\" style=\"display : none\" name=\"op\" value=\"pref-filters\">"; print "<input dojoType=\"dijit.form.TextBox\" style=\"display : none\" name=\"id\" value=\"$filter_id\">"; print "<input dojoType=\"dijit.form.TextBox\" style=\"display : none\" name=\"method\" value=\"editSave\">"; + print "<input dojoType=\"dijit.form.TextBox\" style=\"display : none\" name=\"csrf_token\" value=\"".$_SESSION['csrf_token']."\">"; $result = db_query($this->link, "SELECT id,description FROM ttrss_filter_types ORDER BY description"); |