diff --git a/main/link/link.php b/main/link/link.php index c44a6ad527..83a759782e 100755 --- a/main/link/link.php +++ b/main/link/link.php @@ -99,14 +99,16 @@ $show = isset($_REQUEST['show']) && in_array(trim($_REQUEST['show']), ['all', 'n $categoryId = isset($_REQUEST['category_id']) ? intval($_REQUEST['category_id']) : ''; $linkListUrl = api_get_self().'?'.api_get_cidreq().'&category_id='.$categoryId.'&show='.$show; $content = ''; +$token = Security::get_existing_token(); switch ($action) { case 'addlink': if (api_is_allowed_to_edit(null, true)) { - $form = Link::getLinkForm(null, 'addlink'); - if ($form->validate()) { + $form = Link::getLinkForm(null, 'addlink', $token); + if ($form->validate() && Security::check_token('get')) { // Here we add a link Link::addlinkcategory("link"); + Security::clear_token(); header('Location: '.$linkListUrl); exit; }