Use the actual csrf token, not the placeholder (url::site doesn't

replace that). Fixes ticket #1361
gallery · Sep 11, 2010 · 14ae1fd · 14ae1fd
1 parent cef7ca9
commit 14ae1fd
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/modules/gallery/views/upgrader.html.php b/modules/gallery/views/upgrader.html.php
@@ -84,7 +84,7 @@
         </div>
         <? else: ?>
         <div id="upgrade_button" class="button button-active">
-          <a id="upgrade_link" href="<?= url::site("upgrader/upgrade?csrf=__CSRF__") ?>">
+          <a id="upgrade_link" href="<?= url::site("upgrader/upgrade?csrf=" . access::csrf_token()) ?>">
             <?= t("Upgrade all") ?>
           </a>
         </div>