diff options
| author | zach <zach@controlyourself.ca> | 2008-11-10 21:23:30 -0500 |
|---|---|---|
| committer | zach <zach@controlyourself.ca> | 2008-11-10 21:23:30 -0500 |
| commit | 1e8d26baecad6ca1088ea7815fe2615fb520a10e (patch) | |
| tree | 6a43fb0cb1fdd58bb59c352d79d643ae1b56a8ce /actions/noticesearch.php | |
| parent | aac0605bd1baf1462a20646c01edc19557a33b93 (diff) | |
CSRF Protection for login and new notice. Ticket #503
darcs-hash:20081111022330-462f3-810b2a86e6e209330ade628fc0e97df96151d496.gz
Diffstat (limited to 'actions/noticesearch.php')
| -rw-r--r-- | actions/noticesearch.php | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/actions/noticesearch.php b/actions/noticesearch.php index e6de21ae0..bc052d512 100644 --- a/actions/noticesearch.php +++ b/actions/noticesearch.php @@ -142,6 +142,8 @@ class NoticesearchAction extends SearchAction { 'onclick' => 'doreply("'.$profile->nickname.'"); return false', 'title' => _('reply'), 'class' => 'replybutton')); + common_hidden('posttoken', common_session_token()); + common_raw('→'); common_element_end('a'); common_element_end('p'); |