From bc28d5f295e213b349608bcca1da1b87369e80a9 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Pawe=C5=82=20Nowacki?= <pawel.nowacki@teleit.pl>
Date: Fri, 30 Nov 2018 23:11:28 +0100
Subject: [PATCH 1/2] id attribute support added for csrf_field

i.e. useful in autocomplete forms (it is faster to reach this field by id than by name or its position in form)
---
 system/Common.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/system/Common.php b/system/Common.php
index 1814c882d4dd..252d08223c0c 100644
--- a/system/Common.php
+++ b/system/Common.php
@@ -688,9 +688,9 @@ function csrf_hash()
 	 *
 	 * @return string
 	 */
-	function csrf_field()
+	function csrf_field(string $id = null)
 	{
-		return '<input type="hidden" name="' . csrf_token() . '" value="' . csrf_hash() . '">';
+		return '<input type="hidden"' . (!empty($id) ? ' id="' . esc($id, 'attr') . '"' : '') . ' name="' . csrf_token() . '" value="' . csrf_hash() . '">';
 	}
 }
 

From 9ad16be5395d474035a7ccf348a528f34c762747 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Pawe=C5=82=20Nowacki?= <pawel.nowacki@teleit.pl>
Date: Sat, 1 Dec 2018 13:07:52 +0100
Subject: [PATCH 2/2] Update Common.php

---
 system/Common.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/system/Common.php b/system/Common.php
index 252d08223c0c..d64eb4c726d2 100644
--- a/system/Common.php
+++ b/system/Common.php
@@ -690,7 +690,7 @@ function csrf_hash()
 	 */
 	function csrf_field(string $id = null)
 	{
-		return '<input type="hidden"' . (!empty($id) ? ' id="' . esc($id, 'attr') . '"' : '') . ' name="' . csrf_token() . '" value="' . csrf_hash() . '">';
+		return '<input type="hidden"' . (!empty($id) ? ' id="' . esc($id, 'attr') . '"' : '') . ' name="' . csrf_token() . '" value="' . csrf_hash() . '" />';
 	}
 }