From: jangliss <jangliss@7612ce4b-ef26-0410-bec9-ea0150e637f0>
Date: Sun, 4 Oct 2009 15:42:49 +0000 (+0000)
Subject: Additional smtoken changes.
X-Git-Url: https://vcs.fsf.org/?p=squirrelmail.git;a=commitdiff_plain;h=9c0ecb48c6667f0edc259437e5d75e1f000a4a86

Additional smtoken changes.

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@13855 7612ce4b-ef26-0410-bec9-ea0150e637f0
---

diff --git a/plugins/newmail/newmail_opt.php b/plugins/newmail/newmail_opt.php
index eacb66f1..3d618e1d 100644
--- a/plugins/newmail/newmail_opt.php
+++ b/plugins/newmail/newmail_opt.php
@@ -18,7 +18,7 @@
  */
 require('../../include/init.php');
 
-/** 
+/**
  * Make sure plugin is activated!
  */
 global $plugins;
@@ -65,6 +65,7 @@ echo '</td></tr>' .
             html_tag( 'td', '', 'center', $color[4] ) . "\n" . '<hr style="width: 25%; height: 1px;" />' . "\n";
 
 echo '<form action="'.sqm_baseuri().'src/options.php" method="post" enctype="multipart/form-data">' . "\n" .
+        '<input type="hidden" name="smtoken" value="' . sm_generate_security_token() . '">' . "\n" .
         html_tag( 'table', '', '', '', 'width="100%" cellpadding="5" cellspacing="0" border="0"' ) . "\n";
 
 /* newmail_unseen_notify */
@@ -206,7 +207,7 @@ if ($newmail_allowsound) {
             . html_tag('td',_("Uploaded Media File:"),'right','','style="white-space: nowrap;"')
             . html_tag('td',($newmail_userfile_name!='' ? htmlspecialchars($newmail_userfile_name) : _("unavailable")))
             ."</tr>\n";
-    
+
         if ($newmail_userfile_name!='') {
             echo '<tr>'
                 .'<td colspan="2" align="center">'
diff --git a/plugins/squirrelspell/modules/lang_setup.mod b/plugins/squirrelspell/modules/lang_setup.mod
index 4e670f26..695c4177 100644
--- a/plugins/squirrelspell/modules/lang_setup.mod
+++ b/plugins/squirrelspell/modules/lang_setup.mod
@@ -23,6 +23,7 @@ $msg = '<p>'
   . '</p>'
   . '<form method="post">'
   . '<input type="hidden" name="MOD" value="lang_change" />'
+  . '<input type="hidden" name="smtoken" value="' . sm_generate_security_token() . '" />'
   . '<blockquote><p>';
 /**
  * Present a nice listing.