Fixed broken highlighting form (missing security tokens) (#3381117)

[squirrelmail.git] / templates / default / addressbook_list.tpl

diff --git a/templates/default/addressbook_list.tpl b/templates/default/addressbook_list.tpl
index 121d75376d0d7a3e3da94c2166807f342347a354..6a850f87a7ed83cec83efcaa93610ec72ba73f3a 100644 (file)
--- a/templates/default/addressbook_list.tpl
+++ b/templates/default/addressbook_list.tpl
@@ -47,7 +47,7 @@
   *                       ['JSEmail']     - email address scrubbed for use with
   *                                         javascript functions.
   *
-  * @copyright © 1999-2006 The SquirrelMail Project Team
+  * @copyright 1999-2011 The SquirrelMail Project Team
   * @license http://opensource.org/licenses/gpl-license.php GNU Public License
   * @version $Id$
   * @package squirrelmail
@@ -65,6 +65,7 @@ $source = $addresses[$current_backend];
 $colspan = $abook_has_extra_field ? 6 : 5;
 ?>
 <form action="<?php echo $form_action; ?>" method="post" id="address_book_form" name="address_book_form">
+<input type="hidden" name="smtoken" value="<?php echo sm_generate_security_token(); ?>" />
 <div id="addressList">
 <table cellspacing="0">
  <tr>
@@ -80,9 +81,9 @@ $colspan = $abook_has_extra_field ? 6 : 5;
           if (!empty($plugin_output['address_book_navigation'])) echo $plugin_output['address_book_navigation'];
       ?>
     </div><div class="abookButtons">
-      <input type="submit" value="<?php echo _("Edit Selected"); ?>" name="editaddr" id="editaddr" />
-      <input type="submit" value="<?php echo _("Delete Selected"); ?>" name="deladdr" id="deladdr" />
-      <input type="submit" value="<?php echo /*FIXME: save space?  yes?  no? _("Compose to Selected")*/_("Compose To") . ($javascript_on && $compose_new_win ? '" onclick="var send_to = \'\'; var f = document.forms.length; var i = 0; var grab_next_hidden = \'\'; while (i < f) { var e = document.forms[i].elements.length; var j = 0; while (j < e) { if (document.forms[i].elements[j].type == \'checkbox\' && document.forms[i].elements[j].checked) { var pos = document.forms[i].elements[j].value.indexOf(\'_\'); if (pos >= 1) { grab_next_hidden = document.forms[i].elements[j].value; } } else if (document.forms[i].elements[j].type == \'hidden\' && grab_next_hidden == document.forms[i].elements[j].name) { if (send_to != \'\') { send_to += \', \'; } send_to += document.forms[i].elements[j].value; } j++; } i++; } if (send_to != \'\') { comp_in_new(\''. $base_uri . 'src/compose.php?send_to=\' + send_to, ' . $compose_width . ', ' . $compose_height . '); } return false;"' : '"'); ?> name="compose_to" id="compose_to" />
+      <input type="submit" value="<?php echo _("Edit"); ?>" name="editaddr" id="editaddr" />
+      <input type="submit" value="<?php echo _("Delete"); ?>" name="deladdr" id="deladdr" />
+      <input type="submit" value="<?php echo _("Compose To") . ($javascript_on && $compose_new_win ? '" onclick="var send_to = \'\'; var f = document.forms.length; var i = 0; var grab_next_hidden = \'\'; while (i < f) { var e = document.forms[i].elements.length; var j = 0; while (j < e) { if (document.forms[i].elements[j].type == \'checkbox\' && document.forms[i].elements[j].checked) { var pos = document.forms[i].elements[j].value.indexOf(\'_\'); if (pos >= 1) { grab_next_hidden = document.forms[i].elements[j].value; } } else if (document.forms[i].elements[j].type == \'hidden\' && grab_next_hidden == document.forms[i].elements[j].name) { if (send_to != \'\') { send_to += \', \'; } send_to += document.forms[i].elements[j].value; } j++; } i++; } if (send_to != \'\') { comp_in_new(\''. $base_uri . 'src/compose.php?send_to=\' + send_to, ' . $compose_width . ', ' . $compose_height . '); } return false;"' : '"'); ?> name="compose_to" id="compose_to" />
       <?php if (!empty($plugin_output['address_book_buttons'])) echo $plugin_output['address_book_buttons']; ?>
     </div>
   </td>