From 42de40e320c2a4e35d8143972194d81b2ec46160 Mon Sep 17 00:00:00 2001
From: Miguel Nogueira <miguel456@spacejewel-hosting.com>
Date: Mon, 31 Aug 2020 18:34:09 +0100
Subject: [PATCH] Added CSRF protection to settings

---
 resources/views/dashboard/administration/settings.blade.php | 1 +
 1 file changed, 1 insertion(+)

diff --git a/resources/views/dashboard/administration/settings.blade.php b/resources/views/dashboard/administration/settings.blade.php
index 104b822..a86d788 100644
--- a/resources/views/dashboard/administration/settings.blade.php
+++ b/resources/views/dashboard/administration/settings.blade.php
@@ -43,6 +43,7 @@
 
                 <div class="card-body">
                     <form name="settings" id="settings" method="post" action="{{route('saveSettings')}}">
+                        @csrf
                         @foreach($options as $option)
                             <div class="form-group form-check">
                                 <!-- Unchecked checkbox hack: This only works for serverside languages that process the last duplicate element, since the browser sends both the hidden and checkbox values. -->