Merge pull request #3439 from tobiasd/20170506-token

[Needs OpenID testing] Add token to register

diff --git a/mod/register.php b/mod/register.php
index d6343a22856004f0dc8ac7c001c8b0c99ed9ba6a..4766445d88cedf8f69bd97991c11583fe6fac37e 100644 (file)
--- a/mod/register.php
+++ b/mod/register.php
@@ -8,6 +8,7 @@ require_once('include/user.php');
 
 if(! function_exists('register_post')) {
 function register_post(App $a) {
+       check_form_security_token_redirectOnErr('/register', 'register');
 
        global $lang;
 
@@ -296,7 +297,7 @@ function register_content(App $a) {
                '$sitename'  => $a->get_hostname(),
                '$importh'   => t('Import'),
                '$importt'   => t('Import your profile to this friendica instance'),
-
+               '$form_security_token'  => get_form_security_token("register")
        ));
        return $o;
 

diff --git a/view/templates/register.tpl b/view/templates/register.tpl
index 5c55dac2027a82eaae37ef5df7eb81a3f2fced7f..55c08627419c0286775733fd5c8dd3f5ee0e83d8 100644 (file)
--- a/view/templates/register.tpl
+++ b/view/templates/register.tpl
@@ -3,6 +3,7 @@
 <form action="register" method="post" id="register-form">
 
        <input type="hidden" name="photo" value="{{$photo}}" />
+       <input type="hidden" name="form_security_token" value="{{$form_security_token}}">
 
        {{if $registertext != ""}}<div class="error-message">{{$registertext}} </div>{{/if}}