diff --git a/public/src/forum/accountedit.js b/public/src/forum/accountedit.js
index 191eee262c..9939f85b5c 100644
--- a/public/src/forum/accountedit.js
+++ b/public/src/forum/accountedit.js
@@ -17,6 +17,9 @@ $(document).ready(function() {
 			error('select an image to upload!');
 			return false;			
 		}
+		
+		$(this).find('#imageUploadCsrf').val($('#csrf_token').val());
+		
 
 		$(this).ajaxSubmit({
  
diff --git a/public/templates/accountedit.tpl b/public/templates/accountedit.tpl
index 3dfe7850f9..476d61adf8 100644
--- a/public/templates/accountedit.tpl
+++ b/public/templates/accountedit.tpl
@@ -42,6 +42,7 @@
 			
 			<form id="uploadForm" action="/users/uploadpicture" method="post" enctype="multipart/form-data">
 				<input id="userPhotoInput" type="file" name="userPhoto" >
+				<input id="imageUploadCsrf" type="hidden" name="_csrf" value="">
 			</form>
 			
 			<div id="upload-progress-box" class="progress progress-striped active hide">