diff options
| author | Tim Almdal <tnalmdal@shaw.ca> | 2010-01-29 11:36:35 -0800 |
|---|---|---|
| committer | Tim Almdal <tnalmdal@shaw.ca> | 2010-01-29 11:36:35 -0800 |
| commit | 1bc0d05760df7bff5cee0a330b5b7181b3c49835 (patch) | |
| tree | 6c62ebf8557098679f03708b635beb043e4a45bb | |
| parent | 743fbe76965b00087d8e091f742acd61d3a740d0 (diff) | |
Replace <?= form::close() ?> with </form>. Also add a call to access::csrf_form_field in the form template. Fixes ticket #996.
| -rw-r--r-- | modules/gallery/views/in_place_edit.html.php | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/modules/gallery/views/in_place_edit.html.php b/modules/gallery/views/in_place_edit.html.php index 45cf1d8c..ad9ea845 100644 --- a/modules/gallery/views/in_place_edit.html.php +++ b/modules/gallery/views/in_place_edit.html.php @@ -1,5 +1,6 @@ <?php defined("SYSPATH") or die("No direct script access.") ?> <?= form::open($action, array("method" => "post", "id" => "g-in-place-edit-form", "class" => "g-short-form"), $hidden) ?> + <?= access::csrf_form_field() ?> <ul> <li<? if (!empty($errors["input"])): ?> class="g-error"<? endif ?>> <?= form::input("input", $form["input"], " class=\"textbox\"") ?> @@ -9,7 +10,7 @@ </li> <li><a href="#" class="g-cancel"><?= t("Cancel") ?></a></li> </ul> -<?= form::close() ?> +</form/> <? if (!empty($errors["input"])): ?> <div id="g-in-place-edit-message" class="g-error"><?= $errors["input"] ?></div> <? endif ?> |