From b3c2695237060efa62610911e857abe213c83007 Mon Sep 17 00:00:00 2001
From: Pellaeon Lin <nfsmwlin@gmail.com>
Date: Mon, 31 Aug 2015 17:39:25 +0800
Subject: [PATCH] Update# CSRF for account creation form

---
 controller/registercontroller.php | 1 -
 templates/form.php                | 1 +
 2 files changed, 1 insertion(+), 1 deletion(-)

diff --git a/controller/registercontroller.php b/controller/registercontroller.php
index 0a2fa99..d05fd9a 100644
--- a/controller/registercontroller.php
+++ b/controller/registercontroller.php
@@ -174,7 +174,6 @@ class RegisterController extends Controller {
 
 	/**
 	 * @NoAdminRequired
-	 * @NoCSRFRequired
 	 * @PublicPage
 	 */
 	public function createAccount($token) {
diff --git a/templates/form.php b/templates/form.php
index 46262b3..de89509 100644
--- a/templates/form.php
+++ b/templates/form.php
@@ -1,6 +1,7 @@
 <?php
 \OCP\Util::addStyle('registration', 'style');
 ?><form action="<?php print_unescaped(OC_Helper::linkToRoute('registration.register.createAccount', array('token'=>$_['token']))) ?>" method="post">
+	<input type="hidden" name="requesttoken" value="<?php p($_['requesttoken']) ?>" />
 	<fieldset>
 		<?php if ( $_['errormsgs'] ) {?>
 		<ul class="error">