Nearly all <FORM> blocks now contain a hidden input

[citadel.git] / webcit / graphics.c

diff --git a/webcit/graphics.c b/webcit/graphics.c
index 90333ecd328f8bd53508f401ddafa3fb32d03e1f..daeff6d349c32c9adbe5f91e032fed979be48ca2 100644 (file)
--- a/webcit/graphics.c
+++ b/webcit/graphics.c
@@ -38,6 +38,7 @@ void display_graphics_upload(char *description, char *check_cmd, char *uplurl)
        wprintf("<FORM ENCTYPE=\"multipart/form-data\" action=\"%s\" "
                "METHOD=\"POST\" NAME=\"graphicsupload\">\n", uplurl);
 
+       wprintf("<input type=\"hidden\" name=\"nonce\" value=\"%ld\">\n", WC->nonce);
        wprintf("<INPUT TYPE=\"hidden\" NAME=\"which_room\" VALUE=\"");
        urlescputs(bstr("which_room"));
        wprintf("\">\n");