CSRF compatibility

PTFS-Europe · Apr 8, 2024 · c72bbe5 · c72bbe5
1 parent 3c684eb
commit c72bbe5
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/Koha/Plugin/Com/PTFSEurope/PluginBackend/intra-includes/create.inc b/Koha/Plugin/Com/PTFSEurope/PluginBackend/intra-includes/create.inc
@@ -41,6 +41,7 @@
   <div id="errormessage" style="display:none"></div>
 </div>
 <form method="POST" action="[% here %]" id="create_form">
+  [% INCLUDE 'csrf-token.inc' %]
   <fieldset class="rows">
     <legend>Enter metadata</legend>
     <input name="stage" id="stage" value="validate" type="hidden"/>

diff --git a/Koha/Plugin/Com/PTFSEurope/PluginBackend/opac-includes/create.inc b/Koha/Plugin/Com/PTFSEurope/PluginBackend/opac-includes/create.inc
@@ -33,6 +33,7 @@
 
 [% ELSIF whole.stage == "init" %]
 <form method="POST" id="create_form">
+  [% INCLUDE 'csrf-token.inc' %]
   <fieldset class="rows">
     <legend>Place an interlibrary loan request</legend>
     <input name="stage" id="stage" value="validate" type="hidden"/>