From 619dd0d472db9dada3340e7cdee437df9841c012 Mon Sep 17 00:00:00 2001
From: wrongecho <marcus@itflow.org>
Date: Mon, 23 Mar 2026 16:36:15 +0000
Subject: [PATCH] Fix missing csrf tokens in category modals

---
 admin/modals/category/category_add.php  | 1 +
 admin/modals/category/category_edit.php | 1 +
 2 files changed, 2 insertions(+)

diff --git a/admin/modals/category/category_add.php b/admin/modals/category/category_add.php
index 8fa6ac74..0d28f1fa 100644
--- a/admin/modals/category/category_add.php
+++ b/admin/modals/category/category_add.php
@@ -15,6 +15,7 @@ $category_types_array = ['Expense', 'Income', 'Referral', 'Ticket'];
     </button>
 </div>
 <form action="post.php" method="post" autocomplete="off">
+    <input type="hidden" name="csrf_token" value="<?php echo $_SESSION['csrf_token'] ?>">
 
     <div class="modal-body">
 
diff --git a/admin/modals/category/category_edit.php b/admin/modals/category/category_edit.php
index 6d7ebdb6..fee9fa18 100644
--- a/admin/modals/category/category_edit.php
+++ b/admin/modals/category/category_edit.php
@@ -21,6 +21,7 @@ ob_start();
     </button>
 </div>
 <form action="post.php" method="post" autocomplete="off">
+    <input type="hidden" name="csrf_token" value="<?php echo $_SESSION['csrf_token'] ?>">
     <input type="hidden" name="category_id" value="<?php echo $category_id; ?>">
     <input type="hidden" name="type" value="<?php echo $category_type; ?>">
     <div class="modal-body">