From 6da8821f2c164e35f9ebd662eb2458786906343c Mon Sep 17 00:00:00 2001
From: johnnyq <johnny@pittpc.com>
Date: Mon, 2 Mar 2026 20:51:12 -0500
Subject: [PATCH] Add hidden form field to folder modals as well

---
 agent/modals/folder/folder_add.php    | 1 +
 agent/modals/folder/folder_rename.php | 1 +
 2 files changed, 2 insertions(+)

diff --git a/agent/modals/folder/folder_add.php b/agent/modals/folder/folder_add.php
index 5e54687e..ac7d915a 100644
--- a/agent/modals/folder/folder_add.php
+++ b/agent/modals/folder/folder_add.php
@@ -16,6 +16,7 @@ ob_start();
     </button>
 </div>
 <form action="post.php" method="post" autocomplete="off">
+    <input type="hidden" name="csrf_token" value="<?= $_SESSION['csrf_token'] ?>">
     <input type="hidden" name="client_id" value="<?= $client_id ?>">
     <input type="hidden" name="parent_folder" value="<?= $current_folder_id ?>">
     <div class="modal-body">
diff --git a/agent/modals/folder/folder_rename.php b/agent/modals/folder/folder_rename.php
index 1dcb9f2c..442ea282 100644
--- a/agent/modals/folder/folder_rename.php
+++ b/agent/modals/folder/folder_rename.php
@@ -20,6 +20,7 @@ ob_start();
     </button>
 </div>
 <form action="post.php" method="post" autocomplete="off">
+    <input type="hidden" name="csrf_token" value="<?= $_SESSION['csrf_token'] ?>">
     <input type="hidden" name="folder_id" value="<?php echo $folder_id; ?>">
     <div class="modal-body">