Nearly all <FORM> blocks now contain a hidden input

[citadel.git] / webcit / listsub.c

diff --git a/webcit/listsub.c b/webcit/listsub.c
index bd2dcc1e9317c4acbd76fb5e6b91db9abe75eec4..2000c3c181a7bc18890e8a66bdef9eaab422ba5b 100644 (file)
--- a/webcit/listsub.c
+++ b/webcit/listsub.c
@@ -3,7 +3,7 @@
  */
 /**
  * \defgroup ListSubForms Web forms for handling mailing list subscribe/unsubscribe requests.
- *
+ * \ingroup WebcitDisplayItems
  */
 
 /*@{*/
@@ -51,7 +51,7 @@ void do_listsub(void)
        strcpy(subtype, bstr("subtype"));
 
        wprintf("<CENTER>"
-               "<TABLE WIDTH=100%% BORDER=0 BGCOLOR=\"#444455\"><TR><TD>"
+               "<TABLE class=\"listsub_banner\"><TR><TD>"
                "<SPAN CLASS=\"titlebar\">");
        wprintf(_("List subscribe/unsubscribe"));
        wprintf("</SPAN></TD></TR></TABLE><br />\n");
@@ -168,9 +168,9 @@ void do_listsub(void)
         * Any other (invalid) command causes the form to be displayed
         */
        else {
-FORM:          wprintf("<FORM METHOD=\"POST\" action=\"listsub\">\n"
-                       "<TABLE BORDER=0>\n"
-               );
+FORM:          wprintf("<FORM METHOD=\"POST\" action=\"listsub\">\n");
+               wprintf("<input type=\"hidden\" name=\"nonce\" value=\"%ld\">\n", WC->nonce);
+               wprintf("<TABLE BORDER=0>\n");
 
                wprintf("<TR><TD>Name of list</TD><TD>"
                        "<SELECT NAME=\"room\" SIZE=1>\n");
@@ -202,10 +202,10 @@ FORM:             wprintf("<FORM METHOD=\"POST\" action=\"listsub\">\n"
 
                wprintf("</TABLE>"
                        "(If subscribing) preferred format: "
-                       "<INPUT TYPE=\"radio\" NAME=\"subtype\""
-                       "VALUE=\"list\">One message at a time&nbsp; "
-                       "<INPUT TYPE=\"radio\" NAME=\"subtype\""
-                       "VALUE=\"digest\" CHECKED>Digest format&nbsp; "
+                       "<INPUT TYPE=\"radio\" NAME=\"subtype\" "
+                       "VALUE=\"list\" CHECKED>One message at a time&nbsp; "
+                       "<INPUT TYPE=\"radio\" NAME=\"subtype\" "
+                       "VALUE=\"digest\">Digest format&nbsp; "
                        "<br />\n"
                        "<INPUT TYPE=\"submit\" NAME=\"cmd\""
                        " VALUE=\"subscribe\">\n"