Use django 1.2 CSRF protection

Signed-off-by: Jannis Leidel <jannis@leidel.info>
ericflo · May 5, 2010 · 768359b · 768359b
1 parent 32b6155
commit 768359b
Show file tree

Hide file tree

Showing 3 changed files with 4 additions and 4 deletions.
diff --git a/avatar/templates/avatar/add.html b/avatar/templates/avatar/add.html
@@ -9,6 +9,6 @@
     {% endif %}
     <form enctype="multipart/form-data" method="POST" action="{% url avatar_add %}">
         {{ upload_avatar_form.as_p }}
-        <p><input type="submit" value="{% trans "Upload New Image" %}" /></p>
+        <p>{% csrf_token %}<input type="submit" value="{% trans "Upload New Image" %}" /></p>
     </form>
 {% endblock %}
diff --git a/avatar/templates/avatar/change.html b/avatar/templates/avatar/change.html
@@ -11,11 +11,11 @@
             <ul>
                 {{ primary_avatar_form.as_ul }}
             </ul>
-            <input type="submit" value="{% trans "Choose new Default" %}" />
+            <p>{% csrf_token %}<input type="submit" value="{% trans "Choose new Default" %}" /></p>
         </form>
     {% endif %}
     <form enctype="multipart/form-data" method="POST" action="{% url avatar_add %}">
         {{ upload_avatar_form.as_p }}
-        <p><input type="submit" value="{% trans "Upload New Image" %}" /></p>
+        <p>{% csrf_token %}<input type="submit" value="{% trans "Upload New Image" %}" /></p>
     </form>
 {% endblock %}
diff --git a/avatar/templates/avatar/confirm_delete.html b/avatar/templates/avatar/confirm_delete.html
@@ -11,7 +11,7 @@
             <ul>
                 {{ delete_avatar_form.as_ul }}
             </ul>
-            <input type="submit" value="{% trans "Delete These" %}" />
+            <p>{% csrf_token %}<input type="submit" value="{% trans "Delete These" %}" /></p>
         </form>
     {% endif %}
 {% endblock %}