X-Git-Url: http://git.polytechnique.org/?a=blobdiff_plain;f=plugins%2Ffunction.test_email.php;h=80ad621569d8b03eec1c4984340721e1449046cd;hb=5996b36f2abc8388cf20720eb9604869854c9c61;hp=d9e68ff6718f19b2656e53b2896cec8bab2ba063;hpb=08fa70684fd1332178cddb6b318151335fb4506c;p=platal.git

diff --git a/plugins/function.test_email.php b/plugins/function.test_email.php
index d9e68ff..80ad621 100644
--- a/plugins/function.test_email.php
+++ b/plugins/function.test_email.php
@@ -21,10 +21,12 @@
 
 function smarty_function_test_email($params, &$smarty) {
     $label = isset($params['title']) ? $params['title'] : 'Envoyer un mail de test';
+    $token = "'" . S::v('xsrf_token') . (isset($params['forlife']) ? "', " : "'");
     $forlife = isset($params['forlife']) ? "'" . $params['forlife'] . "'" : '';
     return '<div class="center">'
          . '  <div id="mail_sent" style="position: absolute;"></div><br />'
-         . '  <form action="emails/test" method="get" onsubmit="return sendTestEmail(' . $forlife . ')">'
+         . '  <form action="emails/test" method="get" onsubmit="return sendTestEmail(' . $token . $forlife . ')">'
+         . '    <input type="hidden" name="token" value="' . S::v('xsrf_token') . '" />'
          . '    <div><input type="submit" name="send" value="' . $label . '" /></div>'
          . '  </form>'
          . '</div>';