CSRF protection

2012-08-27 15:19:05 +10:00
parent 4a9d497a94
commit 6229b82a43
8 changed files with 82 additions and 44 deletions
--- a/templates/mod/ban_form.html
+++ b/templates/mod/ban_form.html
@@ -5,6 +5,7 @@
 {% endif %}

 <form action="{{ action }}" method="post">
+	<input type="hidden" name="token" value="{{ token }}">
 	{% if redirect %}
 		<input type="hidden" name="redirect" value="{{ redirect|e }}">
 	{% endif %}