diff options
| author | Michael Save <savetheinternet@tinyboard.org> | 2012-08-27 15:19:05 +1000 |
|---|---|---|
| committer | Michael Save <savetheinternet@tinyboard.org> | 2012-08-27 15:19:05 +1000 |
| commit | 6229b82a43e808d4ead53f841f9cbed3e7393366 (patch) | |
| tree | 29cd12af964a8e2d4fc7c9f6c0737ae00622d713 /templates/mod/move.html | |
| parent | 4a9d497a949c941900dddf8858edb464f1d72f7f (diff) | |
CSRF protection
Diffstat (limited to 'templates/mod/move.html')
| -rw-r--r-- | templates/mod/move.html | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/templates/mod/move.html b/templates/mod/move.html index 802903b2..59bd60f6 100644 --- a/templates/mod/move.html +++ b/templates/mod/move.html @@ -1,4 +1,5 @@ -<form action="?/{{ board }}/move/{{ post }}" method="post"> +<form action="?/{{ board }}/move/{{ post }}" method="post"> + <input type="hidden" name="token" value="{{ token }}"> <table> <tr> <th> @@ -23,7 +24,7 @@ <ul style="list-style:none;padding:0"> {% for targetboard in boards if targetboard.uri != board %} <li> - <input type="radio" name="board" value="{{ targetboard.uri }}" id="ban-board-{{ targetboard.uri }}"> + <input type="radio" name="board" value="{{ targetboard.uri }}" id="ban-board-{{ targetboard.uri }}" {% if boards|count == 2 %}checked{% endif %}> <label style="display:inline" for="ban-board-{{ targetboard.uri }}"> {{ config.board_abbreviation|sprintf(targetboard.uri) }} - {{ targetboard.title|e }} </label> |