5771 add csrftoken field to upload patch form

atutor · Mar 11, 2017 · ed2cca4 · ed2cca4
1 parent 25318a7
commit ed2cca4
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/mods/_standard/patcher/index_admin.php b/mods/_standard/patcher/index_admin.php
@@ -423,6 +423,7 @@ function get_array_by_delimiter($subject, $delimiter)
 		<div class="row"><?php echo _AT("upload_patch"); ?></div>
 
 		<div class="row">
+		    <input type="hidden" name="csrftoken" value="<?php echo $_SESSION['token'];?>" />
 			<input type="hidden" name="MAX_FILE_SIZE" value="52428800" />
 			<input type="file" name="patchfile"  size="50" />
 		</div>