From 4825481c3a953e02155c6686cf5a1756f91e4405 Mon Sep 17 00:00:00 2001
From: garvinhicking <garvinhicking>
Date: Mon, 21 Apr 2008 12:17:39 +0000
Subject: [PATCH] backport

---
 include/admin/templates.inc.php | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/include/admin/templates.inc.php b/include/admin/templates.inc.php
index f30b8d0..b0cda1a 100644
--- a/include/admin/templates.inc.php
+++ b/include/admin/templates.inc.php
@@ -69,7 +69,7 @@ if (file_exists($serendipity['serendipityPath'] . $serendipity['templatePath'] .
 if (is_array($template_config)) {
     serendipity_plugin_api::hook_event('backend_templates_configuration_top', $template_config);
 
-    if ($serendipity['POST']['adminAction'] == 'configure') {
+    if ($serendipity['POST']['adminAction'] == 'configure' && serendipity_checkFormToken()) {
         foreach($serendipity['POST']['template'] AS $option => $value) {
             template_option::set_config($option, $value);
         }
@@ -77,6 +77,7 @@ if (is_array($template_config)) {
     }
 
     echo '<form method="post" action="serendipity_admin.php">';
+    echo serendipity_setformToken();
     echo '<input type="hidden" name="serendipity[adminModule]" value="templates" />';
     echo '<input type="hidden" name="serendipity[adminAction]" value="configure" />';
 
-- 
2.39.5