From c2cbfc555873abc5f166d4c1fedc5835c099e249 Mon Sep 17 00:00:00 2001
From: johnnyq <johnny@pittpc.com>
Date: Sun, 1 Mar 2026 20:43:44 -0500
Subject: [PATCH] Add Hidden Inpout csrf token to client download pdf

---
 agent/modals/client/client_download_pdf.php | 1 +
 1 file changed, 1 insertion(+)

diff --git a/agent/modals/client/client_download_pdf.php b/agent/modals/client/client_download_pdf.php
index 6f29c5d9..8c8a3cb8 100644
--- a/agent/modals/client/client_download_pdf.php
+++ b/agent/modals/client/client_download_pdf.php
@@ -8,6 +8,7 @@
                 </button>
             </div>
             <form action="post.php" method="post" autocomplete="off" target="_blank">
+                <input type="hidden" name="csrf_token" value="<?= $_SESSION['csrf_token'] ?>">
                 <input type="hidden" name="client_id" value="<?php echo $client_id; ?>">
                 <div class="modal-body">
                     <ul class="list-group">