From bdcc30818827538a58d1fb17650bd91a6779c024 Mon Sep 17 00:00:00 2001
From: Yasen Pramatarov <yasen@lindeas.com>
Date: Tue, 3 Jun 2025 11:01:14 +0300
Subject: [PATCH] Adds CSRF the theme switcher

---
 app/templates/theme.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/app/templates/theme.php b/app/templates/theme.php
index fc16e33..f863c6e 100644
--- a/app/templates/theme.php
+++ b/app/templates/theme.php
@@ -24,7 +24,7 @@
                                     <p class="card-text text-muted">Theme ID: <code><?= htmlspecialchars($themeId) ?></code></p>
                                     <div class="mt-auto">
 <?php if (!$isActive) { ?>
-                                        <a href="?page=theme&switch_to=<?= urlencode($themeId) ?>" class="btn btn-primary">Switch to this theme</a>
+                                        <a href="?page=theme&switch_to=<?= urlencode($themeId) ?>&csrf_token=<?= $csrf_token ?>" class="btn btn-primary">Switch to this theme</a>
 <?php } else { ?>
                                         <button class="btn btn-outline-secondary" disabled>Currently active</button>
 <?php } ?>