Misses this file to merge. I like the comments.

[quix0rs-gnu-social.git] / lib / form.php

diff --git a/lib/form.php b/lib/form.php
index 74737f6df5c12953dbc6f71f0bfd90358f499971..ee97f7a32f571b52e0cf0e4ab79766a5763298bb 100644 (file)
--- a/lib/form.php
+++ b/lib/form.php
@@ -91,7 +91,9 @@ class Form extends Widget
 
     function sessionToken()
     {
-        $this->out->hidden('token', common_session_token());
+        if (strtolower($this->method()) == 'post') {
+            $this->out->hidden('token-' . $this->id() ?: common_random_hexstr(3), common_session_token(), 'token');
+        }
     }
 
     /**