Nearly all <FORM> blocks now contain a hidden input

[citadel.git] / webcit / sysmsgs.c

diff --git a/webcit/sysmsgs.c b/webcit/sysmsgs.c
index b995327c724d242ff33cadabf24f4b51ef7514d0..f4222ccb14d51c8f9b35512eb43069f3ce04d43f 100644 (file)
--- a/webcit/sysmsgs.c
+++ b/webcit/sysmsgs.c
@@ -1,14 +1,21 @@
 /*
  * $Id$
- *
- * Editing of various text files on the Citadel server.
  */
-
+/**
+ * \defgroup ShowSysMsgs Editing of various text files on the Citadel server.
+ * \ingroup WebcitDisplayItems
+ */
+/*@{*/
 #include "webcit.h"
 
 
-/*
- * display the form for editing something (room info, bio, etc)
+/**
+ * \brief display the form for editing something (room info, bio, etc)
+ * \param description the descriptive text for the box
+ * \param check_cmd command to check????
+ * \param read_cmd read answer from citadel server???
+ * \param save_cmd save comand to the citadel server??
+ * \param with_room_banner should we bisplay a room banner?
  */
 void display_edit(char *description, char *check_cmd,
                  char *read_cmd, char *save_cmd, int with_room_banner)
@@ -33,13 +40,14 @@ void display_edit(char *description, char *check_cmd,
        svprintf("BOXTITLE", WCS_STRING, _("Edit %s"), description);
        do_template("beginbox");
 
-       wprintf("<div align=\"center\">");
+       wprintf("<div>");
        wprintf(_("Enter %s below.  Text is formatted to "
                "the reader's screen width.  To defeat the "
                "formatting, indent a line at least one space."), description);
        wprintf("<br />");
 
-       wprintf("<FORM METHOD=\"POST\" ACTION=\"%s\">\n", save_cmd);
+       wprintf("<FORM METHOD=\"POST\" action=\"%s\">\n", save_cmd);
+       wprintf("<input type=\"hidden\" name=\"nonce\" value=\"%ld\">\n", WC->nonce);
        wprintf("<TEXTAREA NAME=\"msgtext\" wrap=soft "
                "ROWS=10 COLS=80 WIDTH=80>\n");
        serv_puts(read_cmd);
@@ -57,8 +65,11 @@ void display_edit(char *description, char *check_cmd,
 }
 
 
-/*
- * save a screen which was displayed with display_edit()
+/**
+ * \brief save a screen which was displayed with display_edit()
+ * \param description the window title???
+ * \param enter_cmd which command to enter at the citadel server???
+ * \param regoto should we go to that room again after executing that command?
  */
 void save_edit(char *description, char *enter_cmd, int regoto)
 {
@@ -78,7 +89,7 @@ void save_edit(char *description, char *enter_cmd, int regoto)
                display_main_menu();
                return;
        }
-       text_to_server(bstr("msgtext"), 0);
+       text_to_server(bstr("msgtext"));
        serv_puts("000");
 
        if (regoto) {
@@ -91,3 +102,6 @@ void save_edit(char *description, char *enter_cmd, int regoto)
                return;
        }
 }
+
+
+/*@}*/