X-Git-Url: http://git.polytechnique.org/?a=blobdiff_plain;f=templates%2Fadmin%2Fwiki.tpl;h=45de78648143fc6f5939c01d2497a453095165b8;hb=7b642046b0dbaf122f12beeb565879f3b3dd8171;hp=c8257f3e9e43f5e772946c80ce66eba79c17216d;hpb=769dc7d5461a004b042dfff4628cf8eb61d4b9b7;p=platal.git

diff --git a/templates/admin/wiki.tpl b/templates/admin/wiki.tpl
index c8257f3..45de786 100644
--- a/templates/admin/wiki.tpl
+++ b/templates/admin/wiki.tpl
@@ -73,6 +73,7 @@
 </p>
 
 <form action="admin/wiki/update" method="post" id="update_pages">
+{xsrf_token_field}
 <table class="bicol">
   <tr>
     <th>
@@ -112,8 +113,8 @@
       {$perm.edit}
     </td>
     <td class="action" style="margin-top: 0; margin-bottom: 0; padding-top: 0; padding-bottom: 0; height: 20px">
-      <a href="admin/wiki/rename/{$cat}.{$page}" onclick="var newname=prompt('Déplacer la page {$cat}.{$page} vers&nbsp;:', '{$cat}.{$page}'); if (!newname) return false; this.href += '/'+newname;">{icon name=book_next title='déplacer'}</a>
-      <a href="admin/wiki/delete/{$cat}.{$page}" onclick="return confirm('Supprimer la page {$cat}.{$page} ?');">{icon name=cross title='supprimer'}</a>
+      <a href="admin/wiki/rename/{$cat}.{$page}" onclick="var newname=prompt('Déplacer la page {$cat}.{$page} vers&nbsp;:', '{$cat}.{$page}'); if (!newname) return false; this.href += '/' + newname + '?token={xsrf_token}';">{icon name=book_next title='déplacer'}</a>
+      <a href="admin/wiki/delete/{$cat}.{$page}?token={xsrf_token}" onclick="return confirm('Supprimer la page {$cat}.{$page} ?');">{icon name=cross title='supprimer'}</a>
       <input type="checkbox" name="{$cat}/{$page}"/>
     </td>
   </tr>