[UPDATE] added CTOKEN to forms

public/site_assets/bootstrap/css/mpos.css

@@ -323,7 +323,7 @@ table.dataTable thead .sorting:after {
 .borderless > tbody > tr > td {
     border: none;
 }
-    
+
 span.confirmed {
   width: auto;
   color: #468847;

public/templates/bootstrap/account/edit/detail.tpl

@@ -2,6 +2,7 @@
   <input type="hidden" name="page" value="{$smarty.request.page|escape}">
   <input type="hidden" name="action" value="{$smarty.request.action|escape}">
   <input type="hidden" name="do" value="updateAccount">
+  <input type="hidden" name="ctoken" value="{$CTOKEN|escape|default:""}" />
   <div class="col-lg-6">
     <div class="panel panel-info">
       <div class="panel-heading">

public/templates/bootstrap/account/edit/password.tpl

@@ -2,6 +2,7 @@
   <input type="hidden" name="page" value="{$smarty.request.page|escape}">
   <input type="hidden" name="action" value="{$smarty.request.action|escape}">
   <input type="hidden" name="do" value="updatePassword">
+  <input type="hidden" name="ctoken" value="{$CTOKEN|escape|default:""}" />
   <div class="col-lg-6">
     <div class="panel panel-info">
       <div class="panel-heading">

public/templates/bootstrap/account/transactions/default.tpl

@@ -2,6 +2,7 @@
   <form class="col-lg-4" role="form">
     <input type="hidden" name="page" value="{$smarty.request.page|escape}">
     <input type="hidden" name="action" value="{$smarty.request.action|escape}">
+    <input type="hidden" name="ctoken" value="{$CTOKEN|escape|default:""}" />
     <div class="panel panel-info">
       <div class="panel-heading">
         <i class="fa fa-search fa-fw"></i> Transaction Filter

public/templates/bootstrap/admin/news/default.tpl

@@ -17,6 +17,7 @@
               <input type="hidden" name="page" value="{$smarty.request.page|escape}">
               <input type="hidden" name="action" value="{$smarty.request.action|escape}">
               <input type="hidden" name="do" value="add">
+              <input type="hidden" name="ctoken" value="{$CTOKEN|escape|default:""}" />
               <div class="form-group">
                 <label>Header</label>
                 <input class="form-control" size="30" type="text" name="data[header]" required />

public/templates/bootstrap/admin/news_edit/default.tpl

@@ -18,6 +18,7 @@
               <input type="hidden" name="action" value="{$smarty.request.action|escape}">
               <input type="hidden" name="id" value="{$NEWS.id}">
               <input type="hidden" name="do" value="save">
+              <input type="hidden" name="ctoken" value="{$CTOKEN|escape|default:""}" />
               
               <div class="form-group">
                 <th>Active</th>

public/templates/bootstrap/admin/poolworkers/default.tpl

@@ -9,6 +9,7 @@
           <form action="{$smarty.server.SCRIPT_NAME}">
             <input type="hidden" name="page" value="{$smarty.request.page|escape}" />
             <input type="hidden" name="action" value="{$smarty.request.action|escape}" />
+            <input type="hidden" name="ctoken" value="{$CTOKEN|escape|default:""}" />
             <ul class="pager">
               <li class="previous">
                 <a href="{$smarty.server.SCRIPT_NAME}?page={$smarty.request.page|escape}&action={$smarty.request.action|escape}&start={$smarty.request.start|escape|default:"0" - $LIMIT}{if $FILTERS|default:""}{$FILTERS}{/if}"> &larr;</a>

public/templates/bootstrap/admin/reports/earnings_control.tpl

@@ -1,6 +1,7 @@
 <form action="{$smarty.server.SCRIPT_NAME}" method="post" role="form">
   <input type="hidden" name="page" value="{$smarty.request.page|escape|escape}">
   <input type="hidden" name="action" value="{$smarty.request.action|escape|escape}">
+  <input type="hidden" name="ctoken" value="{$CTOKEN|escape|default:""}" />
   <div class="row">
     <div class="col-lg-12">
       <div class="panel panel-info">

public/templates/bootstrap/admin/settings/default.tpl

@@ -8,6 +8,7 @@
         <input type="hidden" name="page" value="{$smarty.request.page|escape}" />
         <input type="hidden" name="action" value="{$smarty.request.action|escape}" />
         <input type="hidden" name="do" value="save" />
+        <input type="hidden" name="ctoken" value="{$CTOKEN|escape|default:""}" />
         <div class="panel-body">
           <ul class="nav nav-pills">
             {foreach item=TAB from=array_keys($SETTINGS)}

public/templates/bootstrap/admin/templates/editor.tpl

@@ -3,6 +3,7 @@
       <input type="hidden" name="action" value="{$smarty.request.action}">
       <input type="hidden" name="template" value="{$CURRENT_TEMPLATE}">
       <input type="hidden" name="do" value="save">
+      <input type="hidden" name="ctoken" value="{$CTOKEN|escape|default:""}" />
       <div class="panel panel-info">
         <div class="panel-heading">
           <i class="fa fa-pencil fa-fw"></i> Edit template '{$CURRENT_TEMPLATE}'

public/templates/bootstrap/admin/transactions/default.tpl

@@ -34,6 +34,7 @@
   <form class="col-lg-4" role="form">
     <input type="hidden" name="page" value="{$smarty.request.page|escape}">
     <input type="hidden" name="action" value="{$smarty.request.action|escape}">
+    <input type="hidden" name="ctoken" value="{$CTOKEN|escape|default:""}" />
     <div class="panel panel-info">
       <div class="panel-heading">
         <i class="fa fa-search fa-fw"></i> Transaction Filter

public/templates/bootstrap/admin/user/default.tpl

@@ -27,6 +27,7 @@
     <input type="hidden" name="page" value="{$smarty.request.page|escape}">
     <input type="hidden" name="action" value="{$smarty.request.action|escape}">
     <input type="hidden" name="do" value="query">
+    <input type="hidden" name="ctoken" value="{$CTOKEN|escape|default:""}" />
     <div class="panel panel-info">
       <div class="panel-heading">
         <i class="fa fa-search fa-fw"></i> User Search

public/templates/bootstrap/contactform/contactform/default.tpl

@@ -1,6 +1,7 @@
 <form action="{$smarty.server.SCRIPT_NAME}" method="post" role="form">
   <input type="hidden" name="page" value="{$smarty.request.page|escape}">
   <input type="hidden" name="action" value="contactform">
+  <input type="hidden" name="ctoken" value="{$CTOKEN|escape|default:""}" />
   <div class="row">
     <div class="col-lg-12">
       <div class="panel panel-info">

public/templates/bootstrap/contactform/default.tpl

@@ -1,6 +1,7 @@
 <form action="{$smarty.server.SCRIPT_NAME}" method="post" role="form">
   <input type="hidden" name="page" value="{$smarty.request.page|escape}">
   <input type="hidden" name="action" value="contactform">
+  <input type="hidden" name="ctoken" value="{$CTOKEN|escape|default:""}" />
   <div class="row">
     <div class="col-lg-12">
       <div class="panel panel-info">