Add nonce in FB callback

mhaas · Oct 4, 2015 · 57a9245 · 57a9245
1 parent d95c8ce
commit 57a9245
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/views/fb_callback.php b/views/fb_callback.php
@@ -25,6 +25,7 @@
                             <legend><?php echo _('Check In'); ?></legend>
                             <label for="text_fb_message"><?php echo _('Message'); ?></label>
                             <textarea rows="2" name="message" id="text_fb_message" placeholder="<?php echo _('Optional');?>"></textarea>
+                            <input type="hidden" name="nonce" id="fb_message_nonce" value="<?php echo $nonce; ?>"/>
                             <button type="submit" class="pure-button pure-button-primary">
                                 <i class="fa fa-facebook-official fa-lg"></i>
                                 <?php echo _('Check in to') . ' ' .$place_name; ?>