If we add a token to lang_setup (#13855), need to check it in lang_change

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@13858 7612ce4b-ef26-0410-bec9-ea0150e637f0

diff --git a/plugins/squirrelspell/modules/lang_change.mod b/plugins/squirrelspell/modules/lang_change.mod
index ef75fb5adfc77b856a360dc4029fd55c3fc22315..07031ebade4f7b93c532cc1b734647dffce24105 100644 (file)
--- a/plugins/squirrelspell/modules/lang_change.mod
+++ b/plugins/squirrelspell/modules/lang_change.mod
@@ -16,6 +16,9 @@
  * @subpackage squirrelspell
  */
 
+sqgetGlobalVar('smtoken', $submitted_token, SQ_POST, '');
+sm_validate_security_token($submitted_token, 3600, TRUE);
+
 global $SQSPELL_APP_DEFAULT;
 
 if (! sqgetGlobalVar('use_langs',$use_langs,SQ_POST)) {