Some security against XSRF-attacks

[friendica.git] / view / profile_photo.tpl

diff --git a/view/profile_photo.tpl b/view/profile_photo.tpl
index f258b5b86dc85fac6be1bef54a73af7d692cec81..0b3a1cac17f82038c637df84ca971100c390fcff 100755 (executable)
--- a/view/profile_photo.tpl
+++ b/view/profile_photo.tpl
@@ -1,6 +1,7 @@
 <h1>$title</h1>
 
 <form enctype="multipart/form-data" action="profile_photo" method="post">
+<input type='hidden' name='form_security_token' value='$form_security_token'>
 
 <div id="profile-photo-upload-wrapper">
 <label id="profile-photo-upload-label" for="profile-photo-upload">$lbl_upfile </label>