From 4740f39970eb705a326f78b2d6ef542501267cd2 Mon Sep 17 00:00:00 2001
From: CollectiveAccess <seth@collectiveaccess.org>
Date: Wed, 4 May 2022 17:56:12 -0400
Subject: [PATCH] Fix CSRF check

---
 themes/default/views/Contact/form_html.php           | 4 ++--
 themes/default/views/LoginReg/form_login_html.php    | 2 +-
 themes/default/views/LoginReg/form_profile_html.php  | 4 ++--
 themes/default/views/LoginReg/form_register_html.php | 2 +-
 4 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/themes/default/views/Contact/form_html.php b/themes/default/views/Contact/form_html.php
index b578187350..f0b79d7418 100644
--- a/themes/default/views/Contact/form_html.php
+++ b/themes/default/views/Contact/form_html.php
@@ -29,7 +29,7 @@
 	}
 ?>
 	<form id="contactForm" action="<?php print caNavUrl($this->request, "", "Contact", "send"); ?>" role="form" method="post">
-	    <input type="hidden" name="crsfToken" value="<?php print caGenerateCSRFToken($this->request); ?>"/>
+	    <input type="hidden" name="csrfToken" value="<?php print caGenerateCSRFToken($this->request); ?>"/>
 <?php
 	if($pn_id && $t_item->getPrimaryKey()){
 ?>
@@ -95,4 +95,4 @@
 		<input type="hidden" name="sum" value="<?php print $vn_sum; ?>">
 	</form>
 	
-</div><!-- end col --></div><!-- end row -->
\ No newline at end of file
+</div><!-- end col --></div><!-- end row -->
diff --git a/themes/default/views/LoginReg/form_login_html.php b/themes/default/views/LoginReg/form_login_html.php
index 6e40a95be9..861fc77cc8 100644
--- a/themes/default/views/LoginReg/form_login_html.php
+++ b/themes/default/views/LoginReg/form_login_html.php
@@ -41,7 +41,7 @@
 	}
 ?>
 			<form id="LoginForm" action="<?php print caNavUrl($this->request, "", "LoginReg", "login"); ?>" class="form-horizontal" role="form" method="POST">
-				<input type="hidden" name="crsfToken" value="<?php print caGenerateCSRFToken($this->request); ?>"/>
+				<input type="hidden" name="csrfToken" value="<?php print caGenerateCSRFToken($this->request); ?>"/>
 				<div class="form-group">
 					<label for="username" class="col-sm-<?php print $vn_label_col; ?> control-label"><?php print _t("Username"); ?></label>
 					<div class="col-sm-7">
diff --git a/themes/default/views/LoginReg/form_profile_html.php b/themes/default/views/LoginReg/form_profile_html.php
index aa9fa3f893..5634de8a04 100644
--- a/themes/default/views/LoginReg/form_profile_html.php
+++ b/themes/default/views/LoginReg/form_profile_html.php
@@ -47,7 +47,7 @@
 	}
 ?>
 	<form id="ProfileForm" action="<?php print caNavUrl($this->request, "", "LoginReg", "profileSave"); ?>" class="form-horizontal" role="form" method="POST">
-        <input type="hidden" name="crsfToken" value="<?php print caGenerateCSRFToken($this->request); ?>"/>
+        <input type="hidden" name="csrfToken" value="<?php print caGenerateCSRFToken($this->request); ?>"/>
 <?php
 		foreach(array("fname", "lname", "email") as $vs_field){
 			if($va_errors[$vs_field]){
@@ -103,4 +103,4 @@
 </script>
 <?php
 	}
-?>
\ No newline at end of file
+?>
diff --git a/themes/default/views/LoginReg/form_register_html.php b/themes/default/views/LoginReg/form_register_html.php
index c5841cff91..13ff2cb34c 100644
--- a/themes/default/views/LoginReg/form_register_html.php
+++ b/themes/default/views/LoginReg/form_register_html.php
@@ -59,7 +59,7 @@
 	}
 ?>
 	<form id="RegForm" action="<?php print caNavUrl($this->request, "", "LoginReg", "register"); ?>" class="form-horizontal" role="form" method="POST">
-	    <input type="hidden" name="crsfToken" value="<?php print caGenerateCSRFToken($this->request); ?>"/>
+	    <input type="hidden" name="csrfToken" value="<?php print caGenerateCSRFToken($this->request); ?>"/>
 <?php
 	if($this->request->isAjax()){
 ?>