diff options
| author | Michael Foster <savetheinternet@tinyboard.org> | 2013-09-23 16:48:56 +1000 |
|---|---|---|
| committer | Michael Foster <savetheinternet@tinyboard.org> | 2013-09-23 16:48:56 +1000 |
| commit | c8062fbf767100a46e32a81ed34d8d8eaf5c45e7 (patch) | |
| tree | 6f0507630491207006aab332d907e84eb169d723 /templates/mod/noticeboard.html | |
| parent | 00f4da3b82afda892906578ec1bd3c766fe0cd45 (diff) | |
CSRF more mod pages
Diffstat (limited to 'templates/mod/noticeboard.html')
| -rw-r--r-- | templates/mod/noticeboard.html | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/templates/mod/noticeboard.html b/templates/mod/noticeboard.html index 463b8430..fc2e0aef 100644 --- a/templates/mod/noticeboard.html +++ b/templates/mod/noticeboard.html @@ -1,7 +1,8 @@ {% if mod|hasPermission(config.mod.noticeboard_post) %} <fieldset> <legend>{% trans 'New post' %}</legend> - <form style="margin:0" action="" method="post"> + <form style="margin:0" action="?/noticeboard" method="post"> + <input type="hidden" name="token" value="{{ token }}"> <table> <tr> <th>{% trans 'Name' %}</th> @@ -27,7 +28,7 @@ <div class="ban"> {% if mod|hasPermission(config.mod.noticeboard_delete) %} <span style="float:right;padding:2px"> - <a class="unimportant" href="?/noticeboard/delete/{{ post.id }}">[{% trans 'delete' %}]</a> + <a class="unimportant" href="?/noticeboard/delete/{{ post.id }}/{{ post.delete_token }}">[{% trans 'delete' %}]</a> </span> {% endif %} <h2 id="{{ post.id }}"> |