From 768359b11dc98aeb5015a96b8eb990be1a5081d8 Mon Sep 17 00:00:00 2001
From: Mathieu Pillard <m.pillard@liberation.fr>
Date: Thu, 25 Mar 2010 18:42:00 +0100
Subject: [PATCH] Use django 1.2 CSRF protection

Signed-off-by: Jannis Leidel <jannis@leidel.info>
---
 avatar/templates/avatar/add.html            | 2 +-
 avatar/templates/avatar/change.html         | 4 ++--
 avatar/templates/avatar/confirm_delete.html | 2 +-
 3 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/avatar/templates/avatar/add.html b/avatar/templates/avatar/add.html
index a476dd9..a62df6c 100644
--- a/avatar/templates/avatar/add.html
+++ b/avatar/templates/avatar/add.html
@@ -9,6 +9,6 @@
     {% endif %}
     <form enctype="multipart/form-data" method="POST" action="{% url avatar_add %}">
         {{ upload_avatar_form.as_p }}
-        <p><input type="submit" value="{% trans "Upload New Image" %}" /></p>
+        <p>{% csrf_token %}<input type="submit" value="{% trans "Upload New Image" %}" /></p>
     </form>
 {% endblock %}
diff --git a/avatar/templates/avatar/change.html b/avatar/templates/avatar/change.html
index 9eab6f0..321da0d 100644
--- a/avatar/templates/avatar/change.html
+++ b/avatar/templates/avatar/change.html
@@ -11,11 +11,11 @@
             <ul>
                 {{ primary_avatar_form.as_ul }}
             </ul>
-            <input type="submit" value="{% trans "Choose new Default" %}" />
+            <p>{% csrf_token %}<input type="submit" value="{% trans "Choose new Default" %}" /></p>
         </form>
     {% endif %}
     <form enctype="multipart/form-data" method="POST" action="{% url avatar_add %}">
         {{ upload_avatar_form.as_p }}
-        <p><input type="submit" value="{% trans "Upload New Image" %}" /></p>
+        <p>{% csrf_token %}<input type="submit" value="{% trans "Upload New Image" %}" /></p>
     </form>
 {% endblock %}
diff --git a/avatar/templates/avatar/confirm_delete.html b/avatar/templates/avatar/confirm_delete.html
index a5bca79..5c54a7d 100644
--- a/avatar/templates/avatar/confirm_delete.html
+++ b/avatar/templates/avatar/confirm_delete.html
@@ -11,7 +11,7 @@
             <ul>
                 {{ delete_avatar_form.as_ul }}
             </ul>
-            <input type="submit" value="{% trans "Delete These" %}" />
+            <p>{% csrf_token %}<input type="submit" value="{% trans "Delete These" %}" /></p>
         </form>
     {% endif %}
 {% endblock %}