From 6b56a5e31feb2e5e4b621684c857c9ac1e54ccdf Mon Sep 17 00:00:00 2001
From: Uwe Steinmann <steinm@debian.org>
Date: Wed, 4 Jun 2014 19:21:25 +0200
Subject: [PATCH] pass formtoken to movedocument and movefolder ajax calls

---
 views/bootstrap/class.ObjectCheck.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/views/bootstrap/class.ObjectCheck.php b/views/bootstrap/class.ObjectCheck.php
index 4be3b94b8..d3c87b68c 100644
--- a/views/bootstrap/class.ObjectCheck.php
+++ b/views/bootstrap/class.ObjectCheck.php
@@ -222,7 +222,7 @@ class SeedDMS_View_ObjectCheck extends SeedDMS_Bootstrap_Style {
 				echo "<td>".$error['id']."</td>";
 				echo "<td>".$error['parent']."</td>";
 				echo "<td>".$error['msg']."</td>";
-				echo "<td><a class=\"btn movefolder\" source=\"".$error['id']."\" dest=\"".$rootfolder->getID()."\">Move</a> </td>";
+				echo "<td><a class=\"btn movefolder\" source=\"".$error['id']."\" dest=\"".$rootfolder->getID()."\" formtoken=\"".createFormKey('movefolder')."\">Move</a> </td>";
 				echo "</tr>";
 			}
 			print "</tbody></table>\n";
@@ -246,7 +246,7 @@ class SeedDMS_View_ObjectCheck extends SeedDMS_Bootstrap_Style {
 				echo "<td>".$error['id']."</td>";
 				echo "<td>".$error['parent']."</td>";
 				echo "<td>".$error['msg']."</td>";
-				echo "<td><a class=\"btn movedocument\" source=\"".$error['id']."\" dest=\"".$rootfolder->getID()."\">Move</a> </td>";
+				echo "<td><a class=\"btn movedocument\" source=\"".$error['id']."\" dest=\"".$rootfolder->getID()."\" formtoken=\"".createFormKey('movedocument')."\">Move</a> </td>";
 				echo "</tr>";
 			}
 			print "</tbody></table>\n";