X-Git-Url: http://git.polytechnique.org/?a=blobdiff_plain;f=classes%2Fcsvimporter.php;h=571d22767225462ce3dac823b6acf25d1653b9cb;hb=06df222b7962dd5b71b34ec1dd078276d7327dbc;hp=6590df40976d86563d4ac976ebb49768354f91c8;hpb=756ff73fbb0cdd01cce2eda27ba18e1cc99bd735;p=platal.git

diff --git a/classes/csvimporter.php b/classes/csvimporter.php
index 6590df4..571d227 100644
--- a/classes/csvimporter.php
+++ b/classes/csvimporter.php
@@ -330,6 +330,7 @@ class CSVImporter
                 $fields[]     = $key;
             }
             if ($current == 'valid' && Env::has('csv_valid')) {
+                S::assert_xsrf_token();
                 $this->run($_SESSION['csv_action'], $insert, $update);
                 $page->assign('csv_done', true);
                 $this->cleanSession($sesfields);