X-Git-Url: https://vcs.fsf.org/?a=blobdiff_plain;f=templates%2Fdefault%2Ffolder_manip.tpl;h=cbcd7d7c5a5961e0de91ab226f1ddaa6fdb5af1d;hb=f2785d1147920588b40e8a34e3c980697e08748f;hp=010b74747407026be1952256fabbdde43e8d736a;hpb=46489d06566e040f4852385cc6862f65009dfe97;p=squirrelmail.git

diff --git a/templates/default/folder_manip.tpl b/templates/default/folder_manip.tpl
index 010b7474..cbcd7d7c 100644
--- a/templates/default/folder_manip.tpl
+++ b/templates/default/folder_manip.tpl
@@ -24,7 +24,7 @@
  *                              $el['Display'] - string containing the display
  *                                             name for the element
  *                            
- * @copyright © 1999-2006 The SquirrelMail Project Team
+ * @copyright 1999-2016 The SquirrelMail Project Team
  * @license http://opensource.org/licenses/gpl-license.php GNU Public License
  * @version $Id$
  * @package squirrelmail
@@ -52,6 +52,7 @@ extract($t);
     <tr>
      <td>
       <form method="post" action="folders.php" name="cf" id="cf">
+      <input type="hidden" name="smtoken" value="<?php echo sm_generate_security_token(); ?>" />
       <input type="hidden" name="smaction" value="create" />
       <input type="text" name="folder_name" size="25" value="" />
       <br />
@@ -92,7 +93,7 @@ extract($t);
         if ( !empty($rendel_folder_list) ) {
             ?>
      <form method="post" action="folders.php" name="rf" id="rf">
-     <input type="hidden" name="smaction" value="rename">
+     <input type="hidden" name="smaction" value="rename" />
      <select name="old_name">
       <option value="">[ <?php echo _("Select a folder") ?> ]</option>
       <?php echo $rendel_folder_list ?>
@@ -123,7 +124,7 @@ extract($t);
         if ( !empty($rendel_folder_list) ) { 
             ?>
       <form method="post" action="folders.php" name="df" id="df">
-      <input type="hidden" name="smaction" value="delete">
+      <input type="hidden" name="smaction" value="delete" />
       <select name="folder_name">
        <option value="">[ <?php echo _("Select a folder") ?> ]</option>
        <?php echo $rendel_folder_list ?>
@@ -157,6 +158,7 @@ extract($t);
         if (!empty($rendel_folder_list)) {
             ?>
       <form method="post" action="folders.php" name="uf" id="uf">
+      <input type="hidden" name="smtoken" value="<?php echo sm_generate_security_token(); ?>" />
       <input type="hidden" name="smaction" value="unsubscribe" />
       <select name="folder_names[]" multiple="multiple" size="8">
        <?php echo $rendel_folder_list ?>
@@ -175,7 +177,8 @@ extract($t);
         if ($no_list_for_subscribe) {
             ?>
       <form method="post" action="folders.php" name="sf" id="sf">
-      <input type="hidden" name="smaction" value="subscribe">
+      <input type="hidden" name="smtoken" value="<?php echo sm_generate_security_token(); ?>" />
+      <input type="hidden" name="smaction" value="subscribe" />
       <input type="text" name="folder_names[]" size="25" />
       <input type="submit" value="<?php echo _("Subscribe") ?>" />
       </form>
@@ -183,6 +186,7 @@ extract($t);
         } elseif (!empty($subbox_option_list)) {
             ?>
       <form method="post" action="folders.php" name="sf" id="sf">
+      <input type="hidden" name="smtoken" value="<?php echo sm_generate_security_token(); ?>" />
       <input type="hidden" name="smaction" value="subscribe" />
       <div>
             <?php
@@ -211,8 +215,8 @@ extract($t);
         <?php
     }
    ?>
+<?php /* Known plugins using this output point: empty_folders */ if (!empty($plugin_output['folders_bottom'])) echo $plugin_output['folders_bottom']; ?>
   </td>
  </tr>
 </table>
-<?php /* FIXME: no hooks in templates!! */ global $null; do_hook('folders_bottom', $null);  ?>
 </div>