From 6c63ad89de2dd5d30a6ba01f693d332f78593237 Mon Sep 17 00:00:00 2001
From: Baris Soner Usakli <barisusakli@gmail.com>
Date: Fri, 21 Jun 2013 15:51:03 -0400
Subject: [PATCH] image upload sends the csrf token now

---
 public/src/forum/accountedit.js  | 3 +++
 public/templates/accountedit.tpl | 1 +
 2 files changed, 4 insertions(+)

diff --git a/public/src/forum/accountedit.js b/public/src/forum/accountedit.js
index 191eee262c..9939f85b5c 100644
--- a/public/src/forum/accountedit.js
+++ b/public/src/forum/accountedit.js
@@ -17,6 +17,9 @@ $(document).ready(function() {
 			error('select an image to upload!');
 			return false;			
 		}
+		
+		$(this).find('#imageUploadCsrf').val($('#csrf_token').val());
+		
 
 		$(this).ajaxSubmit({
  
diff --git a/public/templates/accountedit.tpl b/public/templates/accountedit.tpl
index 3dfe7850f9..476d61adf8 100644
--- a/public/templates/accountedit.tpl
+++ b/public/templates/accountedit.tpl
@@ -42,6 +42,7 @@
 			
 			<form id="uploadForm" action="/users/uploadpicture" method="post" enctype="multipart/form-data">
 				<input id="userPhotoInput" type="file" name="userPhoto" >
+				<input id="imageUploadCsrf" type="hidden" name="_csrf" value="">
 			</form>
 			
 			<div id="upload-progress-box" class="progress progress-striped active hide">