From e4f048be6d43c79d25784800e0d6ff389e031bc1 Mon Sep 17 00:00:00 2001
From: iAmShorty <rafta@gmx.net>
Date: Mon, 10 Mar 2014 11:52:17 +0100
Subject: [PATCH] [UPDATE] added CTOKEN to forms

---
 public/site_assets/bootstrap/css/mpos.css                      | 2 +-
 public/templates/bootstrap/account/edit/detail.tpl             | 1 +
 public/templates/bootstrap/account/edit/password.tpl           | 1 +
 public/templates/bootstrap/account/transactions/default.tpl    | 1 +
 public/templates/bootstrap/admin/news/default.tpl              | 1 +
 public/templates/bootstrap/admin/news_edit/default.tpl         | 1 +
 public/templates/bootstrap/admin/poolworkers/default.tpl       | 1 +
 public/templates/bootstrap/admin/reports/earnings_control.tpl  | 1 +
 public/templates/bootstrap/admin/settings/default.tpl          | 1 +
 public/templates/bootstrap/admin/templates/editor.tpl          | 1 +
 public/templates/bootstrap/admin/transactions/default.tpl      | 1 +
 public/templates/bootstrap/admin/user/default.tpl              | 1 +
 public/templates/bootstrap/contactform/contactform/default.tpl | 1 +
 public/templates/bootstrap/contactform/default.tpl             | 1 +
 14 files changed, 14 insertions(+), 1 deletion(-)

diff --git a/public/site_assets/bootstrap/css/mpos.css b/public/site_assets/bootstrap/css/mpos.css
index 90eac1d9..e35e5cd2 100644
--- a/public/site_assets/bootstrap/css/mpos.css
+++ b/public/site_assets/bootstrap/css/mpos.css
@@ -323,7 +323,7 @@ table.dataTable thead .sorting:after {
 .borderless > tbody > tr > td {
     border: none;
 }
-    
+
 span.confirmed {
   width: auto;
   color: #468847;
diff --git a/public/templates/bootstrap/account/edit/detail.tpl b/public/templates/bootstrap/account/edit/detail.tpl
index 1e56c98a..574f5d0b 100644
--- a/public/templates/bootstrap/account/edit/detail.tpl
+++ b/public/templates/bootstrap/account/edit/detail.tpl
@@ -2,6 +2,7 @@
   <input type="hidden" name="page" value="{$smarty.request.page|escape}">
   <input type="hidden" name="action" value="{$smarty.request.action|escape}">
   <input type="hidden" name="do" value="updateAccount">
+  <input type="hidden" name="ctoken" value="{$CTOKEN|escape|default:""}" />
   <div class="col-lg-6">
     <div class="panel panel-info">
       <div class="panel-heading">
diff --git a/public/templates/bootstrap/account/edit/password.tpl b/public/templates/bootstrap/account/edit/password.tpl
index 2b00c6d8..f489037e 100644
--- a/public/templates/bootstrap/account/edit/password.tpl
+++ b/public/templates/bootstrap/account/edit/password.tpl
@@ -2,6 +2,7 @@
   <input type="hidden" name="page" value="{$smarty.request.page|escape}">
   <input type="hidden" name="action" value="{$smarty.request.action|escape}">
   <input type="hidden" name="do" value="updatePassword">
+  <input type="hidden" name="ctoken" value="{$CTOKEN|escape|default:""}" />
   <div class="col-lg-6">
     <div class="panel panel-info">
       <div class="panel-heading">
diff --git a/public/templates/bootstrap/account/transactions/default.tpl b/public/templates/bootstrap/account/transactions/default.tpl
index 78280d85..f3664abd 100644
--- a/public/templates/bootstrap/account/transactions/default.tpl
+++ b/public/templates/bootstrap/account/transactions/default.tpl
@@ -2,6 +2,7 @@
   <form class="col-lg-4" role="form">
     <input type="hidden" name="page" value="{$smarty.request.page|escape}">
     <input type="hidden" name="action" value="{$smarty.request.action|escape}">
+    <input type="hidden" name="ctoken" value="{$CTOKEN|escape|default:""}" />
     <div class="panel panel-info">
       <div class="panel-heading">
         <i class="fa fa-search fa-fw"></i> Transaction Filter
diff --git a/public/templates/bootstrap/admin/news/default.tpl b/public/templates/bootstrap/admin/news/default.tpl
index 0b93fb2e..f6ed05d0 100644
--- a/public/templates/bootstrap/admin/news/default.tpl
+++ b/public/templates/bootstrap/admin/news/default.tpl
@@ -17,6 +17,7 @@
               <input type="hidden" name="page" value="{$smarty.request.page|escape}">
               <input type="hidden" name="action" value="{$smarty.request.action|escape}">
               <input type="hidden" name="do" value="add">
+              <input type="hidden" name="ctoken" value="{$CTOKEN|escape|default:""}" />
               <div class="form-group">
                 <label>Header</label>
                 <input class="form-control" size="30" type="text" name="data[header]" required />
diff --git a/public/templates/bootstrap/admin/news_edit/default.tpl b/public/templates/bootstrap/admin/news_edit/default.tpl
index 57ef33ec..7e0fec4c 100644
--- a/public/templates/bootstrap/admin/news_edit/default.tpl
+++ b/public/templates/bootstrap/admin/news_edit/default.tpl
@@ -18,6 +18,7 @@
               <input type="hidden" name="action" value="{$smarty.request.action|escape}">
               <input type="hidden" name="id" value="{$NEWS.id}">
               <input type="hidden" name="do" value="save">
+              <input type="hidden" name="ctoken" value="{$CTOKEN|escape|default:""}" />
               
               <div class="form-group">
                 <th>Active</th>
diff --git a/public/templates/bootstrap/admin/poolworkers/default.tpl b/public/templates/bootstrap/admin/poolworkers/default.tpl
index 7e398283..2ebaf31b 100644
--- a/public/templates/bootstrap/admin/poolworkers/default.tpl
+++ b/public/templates/bootstrap/admin/poolworkers/default.tpl
@@ -9,6 +9,7 @@
           <form action="{$smarty.server.SCRIPT_NAME}">
             <input type="hidden" name="page" value="{$smarty.request.page|escape}" />
             <input type="hidden" name="action" value="{$smarty.request.action|escape}" />
+            <input type="hidden" name="ctoken" value="{$CTOKEN|escape|default:""}" />
             <ul class="pager">
               <li class="previous">
                 <a href="{$smarty.server.SCRIPT_NAME}?page={$smarty.request.page|escape}&action={$smarty.request.action|escape}&start={$smarty.request.start|escape|default:"0" - $LIMIT}{if $FILTERS|default:""}{$FILTERS}{/if}"> &larr;</a>
diff --git a/public/templates/bootstrap/admin/reports/earnings_control.tpl b/public/templates/bootstrap/admin/reports/earnings_control.tpl
index eb332a5e..36dcbe80 100644
--- a/public/templates/bootstrap/admin/reports/earnings_control.tpl
+++ b/public/templates/bootstrap/admin/reports/earnings_control.tpl
@@ -1,6 +1,7 @@
 <form action="{$smarty.server.SCRIPT_NAME}" method="post" role="form">
   <input type="hidden" name="page" value="{$smarty.request.page|escape|escape}">
   <input type="hidden" name="action" value="{$smarty.request.action|escape|escape}">
+  <input type="hidden" name="ctoken" value="{$CTOKEN|escape|default:""}" />
   <div class="row">
     <div class="col-lg-12">
       <div class="panel panel-info">
diff --git a/public/templates/bootstrap/admin/settings/default.tpl b/public/templates/bootstrap/admin/settings/default.tpl
index aa937997..93abb629 100644
--- a/public/templates/bootstrap/admin/settings/default.tpl
+++ b/public/templates/bootstrap/admin/settings/default.tpl
@@ -8,6 +8,7 @@
         <input type="hidden" name="page" value="{$smarty.request.page|escape}" />
         <input type="hidden" name="action" value="{$smarty.request.action|escape}" />
         <input type="hidden" name="do" value="save" />
+        <input type="hidden" name="ctoken" value="{$CTOKEN|escape|default:""}" />
         <div class="panel-body">
           <ul class="nav nav-pills">
             {foreach item=TAB from=array_keys($SETTINGS)}
diff --git a/public/templates/bootstrap/admin/templates/editor.tpl b/public/templates/bootstrap/admin/templates/editor.tpl
index 602c0a35..ebb82fd9 100644
--- a/public/templates/bootstrap/admin/templates/editor.tpl
+++ b/public/templates/bootstrap/admin/templates/editor.tpl
@@ -3,6 +3,7 @@
       <input type="hidden" name="action" value="{$smarty.request.action}">
       <input type="hidden" name="template" value="{$CURRENT_TEMPLATE}">
       <input type="hidden" name="do" value="save">
+      <input type="hidden" name="ctoken" value="{$CTOKEN|escape|default:""}" />
       <div class="panel panel-info">
         <div class="panel-heading">
           <i class="fa fa-pencil fa-fw"></i> Edit template '{$CURRENT_TEMPLATE}'
diff --git a/public/templates/bootstrap/admin/transactions/default.tpl b/public/templates/bootstrap/admin/transactions/default.tpl
index ec9583d4..c83db004 100644
--- a/public/templates/bootstrap/admin/transactions/default.tpl
+++ b/public/templates/bootstrap/admin/transactions/default.tpl
@@ -34,6 +34,7 @@
   <form class="col-lg-4" role="form">
     <input type="hidden" name="page" value="{$smarty.request.page|escape}">
     <input type="hidden" name="action" value="{$smarty.request.action|escape}">
+    <input type="hidden" name="ctoken" value="{$CTOKEN|escape|default:""}" />
     <div class="panel panel-info">
       <div class="panel-heading">
         <i class="fa fa-search fa-fw"></i> Transaction Filter
diff --git a/public/templates/bootstrap/admin/user/default.tpl b/public/templates/bootstrap/admin/user/default.tpl
index 8d094242..92e6ca84 100644
--- a/public/templates/bootstrap/admin/user/default.tpl
+++ b/public/templates/bootstrap/admin/user/default.tpl
@@ -27,6 +27,7 @@
     <input type="hidden" name="page" value="{$smarty.request.page|escape}">
     <input type="hidden" name="action" value="{$smarty.request.action|escape}">
     <input type="hidden" name="do" value="query">
+    <input type="hidden" name="ctoken" value="{$CTOKEN|escape|default:""}" />
     <div class="panel panel-info">
       <div class="panel-heading">
         <i class="fa fa-search fa-fw"></i> User Search
diff --git a/public/templates/bootstrap/contactform/contactform/default.tpl b/public/templates/bootstrap/contactform/contactform/default.tpl
index d4ce4e27..32b46572 100644
--- a/public/templates/bootstrap/contactform/contactform/default.tpl
+++ b/public/templates/bootstrap/contactform/contactform/default.tpl
@@ -1,6 +1,7 @@
 <form action="{$smarty.server.SCRIPT_NAME}" method="post" role="form">
   <input type="hidden" name="page" value="{$smarty.request.page|escape}">
   <input type="hidden" name="action" value="contactform">
+  <input type="hidden" name="ctoken" value="{$CTOKEN|escape|default:""}" />
   <div class="row">
     <div class="col-lg-12">
       <div class="panel panel-info">
diff --git a/public/templates/bootstrap/contactform/default.tpl b/public/templates/bootstrap/contactform/default.tpl
index a2bcfa15..4772ca35 100644
--- a/public/templates/bootstrap/contactform/default.tpl
+++ b/public/templates/bootstrap/contactform/default.tpl
@@ -1,6 +1,7 @@
 <form action="{$smarty.server.SCRIPT_NAME}" method="post" role="form">
   <input type="hidden" name="page" value="{$smarty.request.page|escape}">
   <input type="hidden" name="action" value="contactform">
+  <input type="hidden" name="ctoken" value="{$CTOKEN|escape|default:""}" />
   <div class="row">
     <div class="col-lg-12">
       <div class="panel panel-info">