From: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Date: Mon, 30 Jun 2008 00:37:13 +0000 (+0200)
Subject: Backports commit 8827fc52 to platal-core.
X-Git-Tag: core/1.0.0~65
X-Git-Url: http://git.polytechnique.org/?a=commitdiff_plain;h=37c45da5e78e9cd0660ec825447ea117830bf28e;p=platal.git

Backports commit 8827fc52 to platal-core.

Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
---

diff --git a/classes/plwizard.php b/classes/plwizard.php
index e12eec7..ab3dbca 100644
--- a/classes/plwizard.php
+++ b/classes/plwizard.php
@@ -151,6 +151,8 @@ class PlWizard
 
         // Process the previous page
         if (Post::has('valid_page')) {
+            S::assert_xsrf_token();
+
             $page = $this->getPage(Post::i('valid_page'));
             $curpage = Post::i('valid_page');
             $next = $page->process();