Nearly all <FORM> blocks now contain a hidden input

[citadel.git] / webcit / sysmsgs.c

diff --git a/webcit/sysmsgs.c b/webcit/sysmsgs.c
index 86a5e6fed5cdda72e0f93885e453952141abf744..f4222ccb14d51c8f9b35512eb43069f3ce04d43f 100644 (file)
--- a/webcit/sysmsgs.c
+++ b/webcit/sysmsgs.c
@@ -47,6 +47,7 @@ void display_edit(char *description, char *check_cmd,
        wprintf("<br />");
 
        wprintf("<FORM METHOD=\"POST\" action=\"%s\">\n", save_cmd);
+       wprintf("<input type=\"hidden\" name=\"nonce\" value=\"%ld\">\n", WC->nonce);
        wprintf("<TEXTAREA NAME=\"msgtext\" wrap=soft "
                "ROWS=10 COLS=80 WIDTH=80>\n");
        serv_puts(read_cmd);