X-Git-Url: http://git.polytechnique.org/?a=blobdiff_plain;f=plugins%2Ffunction.test_email.php;h=932c998b62461a396a51316718b64ce447927019;hb=cf81c359b80ad4280a0b3719e0a32c8adba2549d;hp=7cf30491410a1ca99f57cebdc03ce2b1bb8fb37d;hpb=5ff3f06b36211092cf9585d5677bd41ee7abc8ee;p=platal.git

diff --git a/plugins/function.test_email.php b/plugins/function.test_email.php
index 7cf3049..932c998 100644
--- a/plugins/function.test_email.php
+++ b/plugins/function.test_email.php
@@ -1,6 +1,6 @@
 <?php
 /***************************************************************************
- *  Copyright (C) 2003-2007 Polytechnique.org                              *
+ *  Copyright (C) 2003-2008 Polytechnique.org                              *
  *  http://opensource.polytechnique.org/                                   *
  *                                                                         *
  *  This program is free software; you can redistribute it and/or modify   *
@@ -20,11 +20,13 @@
  ***************************************************************************/
 
 function smarty_function_test_email($params, &$smarty) {
-    $label = isset($params['title']) ? $params['title'] : 'Envoyer un mail de test';
-    $forlife = isset($params['forlife']) ? "'" . $params['forlife'] . "'" : '';
+    $label = isset($params['title']) ? $params['title'] : 'Envoyer un email de test';
+    $token = "'" . S::v('xsrf_token') . (isset($params['hruid']) ? "', " : "'");
+    $hruid = isset($params['hruid']) ? "'" . $params['hruid'] . "'" : '';
     return '<div class="center">'
          . '  <div id="mail_sent" style="position: absolute;"></div><br />'
-         . '  <form action="emails/test" method="get" onsubmit="return sendTestEmail(' . $forlife . ')">'
+         . '  <form action="emails/test" method="get" onsubmit="return sendTestEmail(' . $token . $hruid . ')">'
+         . '    <input type="hidden" name="token" value="' . S::v('xsrf_token') . '" />'
          . '    <div><input type="submit" name="send" value="' . $label . '" /></div>'
          . '  </form>'
          . '</div>';