CSRF compatibility

Author: ammopt

Koha/Plugin/Com/PTFSEurope/PluginBackend/intra-includes/create.inc

@@ -41,6 +41,7 @@
   <div id="errormessage" style="display:none"></div>
 </div>
 <form method="POST" action="[% here %]" id="create_form">
+  [% INCLUDE 'csrf-token.inc' %]
   <fieldset class="rows">
     <legend>Enter metadata</legend>
     <input name="stage" id="stage" value="validate" type="hidden"/>

Koha/Plugin/Com/PTFSEurope/PluginBackend/opac-includes/create.inc

@@ -33,6 +33,7 @@
 
 [% ELSIF whole.stage == "init" %]
 <form method="POST" id="create_form">
+  [% INCLUDE 'csrf-token.inc' %]
   <fieldset class="rows">
     <legend>Place an interlibrary loan request</legend>
     <input name="stage" id="stage" value="validate" type="hidden"/>