fix breach in award points that allows user to award infinite points

[osqa.git] / forum_modules / akismet / templates / foundspam.html

diff --git a/forum_modules/akismet/templates/foundspam.html b/forum_modules/akismet/templates/foundspam.html
index 03bc660bd19ade70cba1fb19e5e7ed1ac27883c5..82f647bf8e549c9a3be64bf6bbd23bd408cf5d4a 100644 (file)
--- a/forum_modules/akismet/templates/foundspam.html
+++ b/forum_modules/akismet/templates/foundspam.html
@@ -12,20 +12,26 @@ We're sorry, but Akismet believes your {{ action_name }} is spam.<br />
 If you believe this is an error, please contact the forum administrator.
 {% endblocktrans %}
 
 If you believe this is an error, please contact the forum administrator.
 {% endblocktrans %}
 

+{% if captcha_form.recaptcha %}

 <form action="." method="post">
 <form action="." method="post">

+{% csrf_token %}

 <table>
        <tr>
                <td>
                {% for post_item in post_data.items %}
                <input type="hidden" name="{{ post_item.0 }}" value="{{ post_item.1 }}" />
                {% endfor %}
 <table>
        <tr>
                <td>
                {% for post_item in post_data.items %}
                <input type="hidden" name="{{ post_item.0 }}" value="{{ post_item.1 }}" />
                {% endfor %}

-               {{ captcha_form.captcha }}</td>
+
+               {{ captcha_form.recaptcha }}
+               
+               </td>

        </tr>
        <tr>
        </tr>
        <tr>

-               <td><input type="submit" value"{% trans "Submit" %} /></td>
+               <td><input type="submit" value="{% trans "Submit" %}" /></td>

        </tr>
 </table>
 </form>
        </tr>
 </table>
 </form>

+{% endif %}

 
 </div>
 
 </div>

-{% endblock %}
\ No newline at end of file
+{% endblock %}