Nearly all <FORM> blocks now contain a hidden input

[citadel.git] / webcit / sysmsgs.c

diff --git a/webcit/sysmsgs.c b/webcit/sysmsgs.c
index 7de39987929cbaebffca2f30d7e3075c9308f271..f4222ccb14d51c8f9b35512eb43069f3ce04d43f 100644 (file)
--- a/webcit/sysmsgs.c
+++ b/webcit/sysmsgs.c
@@ -40,13 +40,14 @@ void display_edit(char *description, char *check_cmd,
        svprintf("BOXTITLE", WCS_STRING, _("Edit %s"), description);
        do_template("beginbox");
 
-       wprintf("<div align=\"center\">");
+       wprintf("<div>");
        wprintf(_("Enter %s below.  Text is formatted to "
                "the reader's screen width.  To defeat the "
                "formatting, indent a line at least one space."), description);
        wprintf("<br />");
 
        wprintf("<FORM METHOD=\"POST\" action=\"%s\">\n", save_cmd);
+       wprintf("<input type=\"hidden\" name=\"nonce\" value=\"%ld\">\n", WC->nonce);
        wprintf("<TEXTAREA NAME=\"msgtext\" wrap=soft "
                "ROWS=10 COLS=80 WIDTH=80>\n");
        serv_puts(read_cmd);