From: garvinhicking <garvinhicking>
Date: Mon, 21 Apr 2008 12:17:39 +0000 (+0000)
Subject: backport
X-Git-Url: http://git.mjollnir.org/gw?a=commitdiff_plain;h=4825481c3a953e02155c6686cf5a1756f91e4405;p=s9y.git

backport
---

diff --git a/include/admin/templates.inc.php b/include/admin/templates.inc.php
index f30b8d0..b0cda1a 100644
--- a/include/admin/templates.inc.php
+++ b/include/admin/templates.inc.php
@@ -69,7 +69,7 @@ if (file_exists($serendipity['serendipityPath'] . $serendipity['templatePath'] .
 if (is_array($template_config)) {
     serendipity_plugin_api::hook_event('backend_templates_configuration_top', $template_config);
 
-    if ($serendipity['POST']['adminAction'] == 'configure') {
+    if ($serendipity['POST']['adminAction'] == 'configure' && serendipity_checkFormToken()) {
         foreach($serendipity['POST']['template'] AS $option => $value) {
             template_option::set_config($option, $value);
         }
@@ -77,6 +77,7 @@ if (is_array($template_config)) {
     }
 
     echo '<form method="post" action="serendipity_admin.php">';
+    echo serendipity_setformToken();
     echo '<input type="hidden" name="serendipity[adminModule]" value="templates" />';
     echo '<input type="hidden" name="serendipity[adminAction]" value="configure" />';