diff --git a/htdocs/adherents/cotisations.php b/htdocs/adherents/cotisations.php
index be01ee2df1d..87e3fd88ef6 100644
--- a/htdocs/adherents/cotisations.php
+++ b/htdocs/adherents/cotisations.php
@@ -212,6 +212,7 @@ if ($result)
         if ($allowinsertbankafter && ! $objp->fk_account && $conf->banque->enabled && $conf->global->ADHERENT_BANK_USE && $objp->cotisation)
 		{
 			print "<form method=\"post\" action=\"cotisations.php\">";
+			print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 		}
         print "<tr $bc[$var]>";
 
diff --git a/htdocs/adherents/note.php b/htdocs/adherents/note.php
index a708378fde0..0f62498bb64 100644
--- a/htdocs/adherents/note.php
+++ b/htdocs/adherents/note.php
@@ -82,6 +82,7 @@ if ($id)
 	if ($msg) print '<div class="error">'.$msg.'</div>';
 
 	print "<form method=\"post\" action=\"note.php\">";
+	print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 	
     print '<table class="border" width="100%">';
 
diff --git a/htdocs/adherents/type.php b/htdocs/adherents/type.php
index cf96f3ccbc7..f3a230014ad 100644
--- a/htdocs/adherents/type.php
+++ b/htdocs/adherents/type.php
@@ -197,6 +197,7 @@ if ($_GET["action"] == 'create')
 	if ($mesg) print '<div class="error">'.$mesg.'</div>';
 
 	print "<form action=\"type.php\" method=\"post\">";
+	print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 	print '<table class="border" width="100%">';
 
 	print '<input type="hidden" name="action" value="add">';
diff --git a/htdocs/admin/barcode.php b/htdocs/admin/barcode.php
index 913f2cfc182..28c1384280f 100644
--- a/htdocs/admin/barcode.php
+++ b/htdocs/admin/barcode.php
@@ -252,6 +252,7 @@ if ($conf->societe->enabled)
 {
 	$var=!$var;
 	print "<form method=\"post\" action=\"".$_SERVER["PHP_SELF"]."\">";
+	print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 	print "<input type=\"hidden\" name=\"action\" value=\"setdefaultbarcodetype\">";
 	print "<tr ".$bc[$var].">";
 	print '<td>'.$langs->trans("SetDefaultBarcodeTypeProducts").'</td>';
@@ -269,6 +270,7 @@ if ($conf->produit->enabled)
 {
 	$var=!$var;
 	print "<form method=\"post\" action=\"".$_SERVER["PHP_SELF"]."\">";
+	print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 	print "<input type=\"hidden\" name=\"action\" value=\"GENBARCODE_BARCODETYPE_THIRDPARTY\">";
 	print "<tr ".$bc[$var].">";
 	print '<td>'.$langs->trans("SetDefaultBarcodeTypeThirdParties").'</td>';
diff --git a/htdocs/admin/commande.php b/htdocs/admin/commande.php
index 405ee2af1d8..73b03016f65 100644
--- a/htdocs/admin/commande.php
+++ b/htdocs/admin/commande.php
@@ -473,6 +473,7 @@ print '</form>';
 //Use draft Watermark
 $var=!$var;
 print "<form method=\"post\" action=\"".$_SERVER["PHP_SELF"]."\">";
+print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 print "<input type=\"hidden\" name=\"action\" value=\"set_COMMANDE_DRAFT_WATERMARK\">";
 print '<tr '.$bc[$var].'><td colspan="2">';
 print $langs->trans("WatermarkOnDraftOrders").'<br>';
diff --git a/htdocs/admin/confexped.php b/htdocs/admin/confexped.php
index 55d228dea47..e412f64061f 100644
--- a/htdocs/admin/confexped.php
+++ b/htdocs/admin/confexped.php
@@ -107,6 +107,7 @@ $var=true;
 // expedition activation/desactivation
 $var=!$var;
 print "<form method=\"post\" action=\"confexped.php\">";
+print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 print '<table class="noborder" width="100%">';
 print '<tr class="liste_titre">';
 print '<td>'.$langs->trans("Feature").'</td>';
@@ -143,6 +144,7 @@ print '</form>';
 // Bon de livraison activation/desactivation
 $var=!$var;
 print "<form method=\"post\" action=\"confexped.php\">";
+print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 print '<table class="noborder" width="100%">';
 print "<input type=\"hidden\" name=\"action\" value=\"delivery\">";
 print "<tr ".$bc[$var].">";
diff --git a/htdocs/admin/external_rss.php b/htdocs/admin/external_rss.php
index 45c078965c6..b6a63afea69 100644
--- a/htdocs/admin/external_rss.php
+++ b/htdocs/admin/external_rss.php
@@ -252,6 +252,7 @@ if ($resql)
 		// print_r($rss->items);
 		
 		print "<form name=\"externalrssconfig\" action=\"external_rss.php\" method=\"post\">";
+		print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 		
 		print "<tr class=\"liste_titre\">";
 		print "<td colspan=\"2\">".$langs->trans("RSS")." ".($i+1)."</td>";
diff --git a/htdocs/admin/facture.php b/htdocs/admin/facture.php
index 2fbaa290a4a..180d8a71a9d 100644
--- a/htdocs/admin/facture.php
+++ b/htdocs/admin/facture.php
@@ -624,6 +624,7 @@ print '</form>';
 
 $var=!$var;
 print "<form method=\"post\" action=\"".$_SERVER["PHP_SELF"]."\">";
+print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 print "<input type=\"hidden\" name=\"action\" value=\"set_FACTURE_DRAFT_WATERMARK\">";
 print '<tr '.$bc[$var].'><td colspan="2">';
 print $langs->trans("WatermarkOnDraftBill").'<br>';
diff --git a/htdocs/admin/fichinter.php b/htdocs/admin/fichinter.php
index 371d5b71fbd..9332fc29ba9 100644
--- a/htdocs/admin/fichinter.php
+++ b/htdocs/admin/fichinter.php
@@ -390,6 +390,7 @@ $var=true;
 //Use draft Watermark
 $var=!$var;
 print "<form method=\"post\" action=\"".$_SERVER["PHP_SELF"]."\">";
+print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 print "<input type=\"hidden\" name=\"action\" value=\"set_FICHINTER_DRAFT_WATERMARK\">";
 print '<tr '.$bc[$var].'><td colspan="2">';
 print $langs->trans("WatermarkOnDraftInterventionCards").'<br>';
diff --git a/htdocs/admin/produit.php b/htdocs/admin/produit.php
index afe8d046e4b..7b280a15dba 100644
--- a/htdocs/admin/produit.php
+++ b/htdocs/admin/produit.php
@@ -164,6 +164,7 @@ print "  <td width=\"80\">&nbsp;</td></tr>\n";
 // multiprix activation/desactivation
 $var=!$var;
 print "<form method=\"post\" action=\"produit.php\">";
+print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 print "<input type=\"hidden\" name=\"action\" value=\"multiprix\">";
 print "<tr ".$bc[$var].">";
 print '<td>'.$langs->trans("MultiPricesAbility").'</td>';
@@ -181,6 +182,7 @@ if($conf->global->PRODUIT_MULTIPRICES)
 {
 	$var=!$var;
 	print "<form method=\"post\" action=\"produit.php\">";
+	print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 	print "<input type=\"hidden\" name=\"action\" value=\"multiprix_num\">";
 	print "<tr ".$bc[$var].">";
 	print '<td>'.$langs->trans("MultiPricesNumPrices").'</td>';
@@ -193,6 +195,7 @@ if($conf->global->PRODUIT_MULTIPRICES)
 // sousproduits activation/desactivation
 $var=!$var;
 print "<form method=\"post\" action=\"produit.php\">";
+print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 print "<input type=\"hidden\" name=\"action\" value=\"sousproduits\">";
 print "<tr ".$bc[$var].">";
 print '<td>'.$langs->trans("AssociatedProductsAbility").'</td>';
@@ -207,6 +210,7 @@ print '</form>';
 // utilisation formulaire Ajax sur choix produit
 $var=!$var;
 print "<form method=\"post\" action=\"produit.php\">";
+print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 print "<input type=\"hidden\" name=\"action\" value=\"usesearchtoselectproduct\">";
 print "<tr ".$bc[$var].">";
 print '<td>'.$langs->trans("UseSearchToSelectProduct").'</td>';
@@ -231,6 +235,7 @@ if (empty($conf->global->PRODUIT_USE_SEARCH_TO_SELECT))
 {
 	$var=!$var;
 	print "<form method=\"post\" action=\"produit.php\">";
+	print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 	print "<input type=\"hidden\" name=\"action\" value=\"nbprod\">";
 	print "<tr ".$bc[$var].">";
 	print '<td>'.$langs->trans("NumberOfProductShowInSelect").'</td>';
@@ -243,6 +248,7 @@ if (empty($conf->global->PRODUIT_USE_SEARCH_TO_SELECT))
 // Visualiser description produit dans les formulaires activation/desactivation
 $var=!$var;
 print "<form method=\"post\" action=\"produit.php\">";
+print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 print "<input type=\"hidden\" name=\"action\" value=\"viewProdDescInForm\">";
 print "<tr ".$bc[$var].">";
 print '<td>'.$langs->trans("ViewProductDescInFormAbility").'</td>';
@@ -258,6 +264,7 @@ print '</form>';
 /*
 $var=!$var;
 print "<form method=\"post\" action=\"produit.php\">";
+print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 print "<input type=\"hidden\" name=\"action\" value=\"confirmDeleteProdLineInForm\">";
 print "<tr ".$bc[$var].">";
 print '<td>'.$langs->trans("ConfirmDeleteProductLineAbility").'</td>';
@@ -273,6 +280,7 @@ print '</form>';
 // Utilisation de l'ecotaxe
 $var=!$var;
 print "<form method=\"post\" action=\"produit.php\">";
+print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 print "<input type=\"hidden\" name=\"action\" value=\"useecotaxe\">";
 print "<tr ".$bc[$var].">";
 print '<td>'.$langs->trans("UseEcoTaxeAbility").'</td>';
diff --git a/htdocs/admin/propale.php b/htdocs/admin/propale.php
index e11c1ff81a1..bbd61bdae55 100644
--- a/htdocs/admin/propale.php
+++ b/htdocs/admin/propale.php
@@ -426,6 +426,7 @@ print "</tr>";
 
 $var=!$var;
 print "<form method=\"post\" action=\"".$_SERVER["PHP_SELF"]."\">";
+print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 print "<input type=\"hidden\" name=\"action\" value=\"setdefaultduration\">";
 print "<tr ".$bc[$var].">";
 print '<td>'.$langs->trans("DefaultProposalDurationValidity").'</td>';
@@ -451,6 +452,7 @@ if ($conf->commande->enabled)
 {
 	$var=!$var;
 	print "<form method=\"post\" action=\"".$_SERVER["PHP_SELF"]."\">";
+	print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 	print "<input type=\"hidden\" name=\"action\" value=\"setclassifiedinvoiced\">";
 	print "<tr ".$bc[$var].">";
 	print '<td>'.$langs->trans("ClassifiedInvoicedWithOrder").'</td>';
@@ -476,6 +478,7 @@ print '</form>';
 
 $var=!$var;
 print "<form method=\"post\" action=\"".$_SERVER["PHP_SELF"]."\">";
+print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 print "<input type=\"hidden\" name=\"action\" value=\"set_PROPALE_DRAFT_WATERMARK\">";
 print '<tr '.$bc[$var].'><td colspan="2">';
 print $langs->trans("WatermarkOnDraftProposal").'<br>';
diff --git a/htdocs/admin/security.php b/htdocs/admin/security.php
index a3f95a87d5a..1c2660233dc 100644
--- a/htdocs/admin/security.php
+++ b/htdocs/admin/security.php
@@ -249,6 +249,7 @@ print '<br>';
 
 $var=true;
 print "<form method=\"post\" action=\"security.php\">";
+print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 print "<input type=\"hidden\" name=\"action\" value=\"encrypt\">";
 
 print '<table class="noborder" width="100%">';
diff --git a/htdocs/admin/societe.php b/htdocs/admin/societe.php
index 59f989ab88b..d97114c3468 100644
--- a/htdocs/admin/societe.php
+++ b/htdocs/admin/societe.php
@@ -237,9 +237,10 @@ print "  <td>".$langs->trans("Parameters")."</td>\n";
 print "  <td align=\"right\" width=\"60\">".$langs->trans("Value")."</td>\n";
 print "  <td width=\"80\">&nbsp;</td></tr>\n";
 
-// Utilisation formulaire Ajax sur choix soci�t�
+// Utilisation formulaire Ajax sur choix societe
 $var=!$var;
 print "<form method=\"post\" action=\"societe.php\">";
+print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 print "<input type=\"hidden\" name=\"action\" value=\"usesearchtoselectcompany\">";
 print "<tr ".$bc[$var].">";
 print '<td width="80%">'.$langs->trans("UseSearchToSelectCompany").'</td>';
diff --git a/htdocs/admin/stock.php b/htdocs/admin/stock.php
index 0742d63722d..3b4801aad55 100644
--- a/htdocs/admin/stock.php
+++ b/htdocs/admin/stock.php
@@ -134,6 +134,7 @@ print "<tr ".$bc[$var].">";
 print '<td width="60%">'.$langs->trans("UserWarehouse").'</td>';
 print '<td width="160" align="right">';
 print "<form method=\"post\" action=\"stock.php\">";
+print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 print "<input type=\"hidden\" name=\"action\" value=\"STOCK_USERSTOCK\">";
 print $html->selectyesno("STOCK_USERSTOCK",$conf->global->STOCK_USERSTOCK,1);
 print '<input type="submit" class="button" value="'.$langs->trans("Modify").'">';
@@ -148,6 +149,7 @@ if ($conf->global->STOCK_USERSTOCK == 1)
 
 	print '<td width="160" align="right">';
 	print "<form method=\"post\" action=\"stock.php\">";
+	print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 	print "<input type=\"hidden\" name=\"action\" value=\"STOCK_USERSTOCK_AUTOCREATE\">";
 	print $html->selectyesno("STOCK_USERSTOCK_AUTOCREATE",$conf->global->STOCK_USERSTOCK_AUTOCREATE,1);
 
@@ -172,6 +174,7 @@ if ($conf->facture->enabled)
 	print '<td width="60%">'.$langs->trans("DeStockOnBill").'</td>';
 	print '<td width="160" align="right">';
 	print "<form method=\"post\" action=\"stock.php\">";
+	print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 	print "<input type=\"hidden\" name=\"action\" value=\"STOCK_CALCULATE_ON_BILL\">";
 	print $html->selectyesno("STOCK_CALCULATE_ON_BILL",$conf->global->STOCK_CALCULATE_ON_BILL,1);
 	print '<input type="submit" class="button" value="'.$langs->trans("Modify").'">';
@@ -185,6 +188,7 @@ if ($conf->commande->enabled)
 	print '<td width="60%">'.$langs->trans("DeStockOnValidateOrder").'</td>';
 	print '<td width="160" align="right">';
 	print "<form method=\"post\" action=\"stock.php\">";
+	print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 	print "<input type=\"hidden\" name=\"action\" value=\"STOCK_CALCULATE_ON_VALIDATE_ORDER\">";
 	print $html->selectyesno("STOCK_CALCULATE_ON_VALIDATE_ORDER",$conf->global->STOCK_CALCULATE_ON_VALIDATE_ORDER,1);
 	print '<input type="submit" class="button" value="'.$langs->trans("Modify").'">';
@@ -198,6 +202,7 @@ if ($conf->expedition->enabled)
 	print '<td width="60%">'.$langs->trans("DeStockOnShipment").'</td>';
 	print '<td width="160" align="right">';
 	print "<form method=\"post\" action=\"stock.php\">";
+	print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 	print "<input type=\"hidden\" name=\"action\" value=\"STOCK_CALCULATE_ON_SHIPMENT\">";
 	print $html->selectyesno("STOCK_CALCULATE_ON_SHIPMENT",$conf->global->STOCK_CALCULATE_ON_SHIPMENT,1);
 	print '<input type="submit" class="button" value="'.$langs->trans("Modify").'">';
@@ -219,6 +224,7 @@ if ($conf->fournisseur->enabled)
 	print '<td width="60%">'.$langs->trans("ReStockOnBill").'</td>';
 	print '<td width="160" align="right">';
 	print "<form method=\"post\" action=\"stock.php\">";
+	print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 	print "<input type=\"hidden\" name=\"action\" value=\"STOCK_CALCULATE_ON_SUPPLIER_BILL\">";
 	print $html->selectyesno("STOCK_CALCULATE_ON_SUPPLIER_BILL",$conf->global->STOCK_CALCULATE_ON_SUPPLIER_BILL,1);
 	print '<input type="submit" class="button" value="'.$langs->trans("Modify").'">';
@@ -232,6 +238,7 @@ if ($conf->commande->enabled)
 	print '<td width="60%">'.$langs->trans("ReStockOnValidateOrder").'</td>';
 	print '<td width="160" align="right">';
 	print "<form method=\"post\" action=\"stock.php\">";
+	print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 	print "<input type=\"hidden\" name=\"action\" value=\"STOCK_CALCULATE_ON_SUPPLIER_VALIDATE_ORDER\">";
 	print $html->selectyesno("STOCK_CALCULATE_ON_SUPPLIER_VALIDATE_ORDER",$conf->global->STOCK_CALCULATE_ON_SUPPLIER_VALIDATE_ORDER,1);
 	print '<input type="submit" class="button" value="'.$langs->trans("Modify").'">';
diff --git a/htdocs/boutique/notification/fiche.php b/htdocs/boutique/notification/fiche.php
index c06ce029933..7bb56a73b73 100644
--- a/htdocs/boutique/notification/fiche.php
+++ b/htdocs/boutique/notification/fiche.php
@@ -62,6 +62,7 @@ if ($action == 'create')
 {
 
   print "<form action=\"fiche.php?id=$id\" method=\"post\">\n";
+  print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
   print '<input type="hidden" name="action" value="add">';
 
   print '<div class="titre">Nouvel Editeur</div><br>';
@@ -90,6 +91,7 @@ else
 	      print '<div class="titre">Edition de la fiche Editeur : '.$editeur->titre.'</div><br>';
 	      
 	      print "<form action=\"fiche.php?id=$id\" method=\"post\">\n";
+	      print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 	      print '<input type="hidden" name="action" value="update">';
 	      
 	      print '<table border="1" width="100%" cellspacing="0" cellpadding="4">';
diff --git a/htdocs/comm/addpropal.php b/htdocs/comm/addpropal.php
index e41a22e853f..07165e4ed09 100644
--- a/htdocs/comm/addpropal.php
+++ b/htdocs/comm/addpropal.php
@@ -99,6 +99,7 @@ if ($_GET["action"] == 'create')
 	}
 
 	print "<form name='addprop' action=\"propal.php?socid=".$soc->id."\" method=\"post\">";
+	print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 	print "<input type=\"hidden\" name=\"action\" value=\"add\">";
 
 	print '<table class="border" width="100%">';
diff --git a/htdocs/compta/bank/ligne.php b/htdocs/compta/bank/ligne.php
index 6eafbd96430..039cb5f4477 100644
--- a/htdocs/compta/bank/ligne.php
+++ b/htdocs/compta/bank/ligne.php
@@ -256,7 +256,8 @@ if ($result)
 
 		$i++;
 
-		print "<form name='update' method=\"post\" action=\"ligne.php?rowid=$objp->rowid\">";
+		print '<form name="update" method="post" action="ligne.php?rowid='.$objp->rowid.'">';
+		print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 		print "<input type=\"hidden\" name=\"action\" value=\"update\">";
 		print "<input type=\"hidden\" name=\"orig_account\" value=\"".$orig_account."\">";
 
@@ -426,6 +427,7 @@ if ($result)
 		if ($user->rights->banque->modifier || $user->rights->banque->consolidate)
 		{
 			print "<form method=\"post\" action=\"ligne.php?rowid=$objp->rowid\">";
+			print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 			print '<input type="hidden" name="action" value="type">';
 			print "<input type=\"hidden\" name=\"orig_account\" value=\"".$orig_account."\">";
 			print $html->select_types_paiements($objp->fk_type,"value",'',2);
@@ -444,6 +446,7 @@ if ($result)
 		if ($user->rights->banque->modifier)
 		{
 			print "<form method=\"post\" action=\"ligne.php?rowid=$objp->rowid\">";
+			print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 			print '<input type="hidden" name="action" value="banque">';
 			print "<input type=\"hidden\" name=\"orig_account\" value=\"".$orig_account."\">";
 			print '<input type="text" class="flat" size="40" name="banque" value="'.(empty($objp->banque) ? '' : $objp->banque).'">';
@@ -461,6 +464,7 @@ if ($result)
 		if ($user->rights->banque->modifier || $user->rights->banque->consolidate)
 		{
 			print "<form method=\"post\" action=\"ligne.php?rowid=$objp->rowid\">";
+			print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 			print '<input type="hidden" name="action" value="emetteur">';
 			print "<input type=\"hidden\" name=\"orig_account\" value=\"".$orig_account."\">";
 			print '<input type="text" class="flat" size="40" name="emetteur" value="'.(empty($objp->emetteur) ? '' : stripslashes($objp->emetteur)).'">';
@@ -481,6 +485,7 @@ if ($result)
 	  if ($user->rights->banque->consolidate)
 	  {
 		  print "<form method=\"post\" action=\"ligne.php?rowid=$objp->rowid\">";
+		  print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 		  print '<input type="hidden" name="action" value="num_releve">';
 		  print "<input type=\"hidden\" name=\"orig_account\" value=\"".$orig_account."\">";
 		  print '<td colspan="3">';
@@ -511,6 +516,7 @@ print '<br>';
 print '<table class="noborder" width="100%">';
 
 print "<form method=\"post\" action=\"ligne.php?rowid=$rowid&amp;account=$account\">";
+print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 print "<input type=\"hidden\" name=\"action\" value=\"class\">";
 print "<input type=\"hidden\" name=\"orig_account\" value=\"".$orig_account."\">";
 print "<tr class=\"liste_titre\"><td>".$langs->trans("Rubriques")."</td><td colspan=\"2\">";
diff --git a/htdocs/compta/bank/releve.php b/htdocs/compta/bank/releve.php
index 8c28ea5d220..9d0046eb8d7 100644
--- a/htdocs/compta/bank/releve.php
+++ b/htdocs/compta/bank/releve.php
@@ -224,6 +224,7 @@ else
 	print '<br>';
 
 	print "<form method=\"post\" action=\"releve.php\">";
+	print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 	print "<input type=\"hidden\" name=\"action\" value=\"add\">";
 
 	print '<table class="border" width="100%">';
diff --git a/htdocs/compta/bank/virement.php b/htdocs/compta/bank/virement.php
index 543ec41cb58..b9916f1f3c1 100644
--- a/htdocs/compta/bank/virement.php
+++ b/htdocs/compta/bank/virement.php
@@ -146,6 +146,7 @@ print $langs->trans("TransferDesc");
 print "<br><br>";
 
 print "<form name='add' method=\"post\" action=\"virement.php\">";
+print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 
 print '<input type="hidden" name="action" value="add">';
 
diff --git a/htdocs/compta/deplacement/fiche.php b/htdocs/compta/deplacement/fiche.php
index f69b89d1994..a6b4718d9b3 100644
--- a/htdocs/compta/deplacement/fiche.php
+++ b/htdocs/compta/deplacement/fiche.php
@@ -132,6 +132,7 @@ if ($_GET["action"] == 'create')
 	if ($mesg) print $mesg."<br>";
 
 	print "<form name='add' action=\"fiche.php\" method=\"post\">\n";
+	print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 	print '<input type="hidden" name="action" value="add">';
 
 	print '<table class="border" width="100%">';
@@ -186,6 +187,7 @@ else
 				dol_fiche_head($head, $hselected, $langs->trans("TripCard"));
 
 				print "<form name='update' action=\"fiche.php\" method=\"post\">\n";
+				print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 				print '<input type="hidden" name="action" value="update">';
 				print '<input type="hidden" name="id" value="'.$id.'">';
 
diff --git a/htdocs/compta/dons/fiche.php b/htdocs/compta/dons/fiche.php
index 3e93b6fb7c3..7158662418f 100644
--- a/htdocs/compta/dons/fiche.php
+++ b/htdocs/compta/dons/fiche.php
@@ -364,6 +364,7 @@ if ($_GET["rowid"] && $_GET["action"] != 'edit')
 	dol_fiche_head($head, $hselected, $langs->trans("Ref").": ".$_GET["rowid"]);
 
 	print "<form action=\"fiche.php\" method=\"post\">";
+	print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 	print '<table class="border" width="100%">';
 
 	// Ref
diff --git a/htdocs/compta/sociales/charges.php b/htdocs/compta/sociales/charges.php
index 0bf2f242b7a..8bdae6d72f9 100644
--- a/htdocs/compta/sociales/charges.php
+++ b/htdocs/compta/sociales/charges.php
@@ -276,7 +276,11 @@ if ($chid > 0)
 			if ($ret == 'html') print '<br>';
 		}
 
-		if ($_GET['action'] == 'edit') print "<form name=\"charge\" action=\"charges.php?id=$cha->id&amp;action=update\" method=\"post\">";
+		if ($_GET['action'] == 'edit')
+		{
+			print "<form name=\"charge\" action=\"charges.php?id=$cha->id&amp;action=update\" method=\"post\">";
+			print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
+		}
 
 		print '<table class="border" width="100%">';
 
diff --git a/htdocs/compta/tva/fiche.php b/htdocs/compta/tva/fiche.php
index 37719d87d1e..d5498409c9b 100644
--- a/htdocs/compta/tva/fiche.php
+++ b/htdocs/compta/tva/fiche.php
@@ -144,6 +144,7 @@ if ($id)
 if ($_GET["action"] == 'create')
 {
     print "<form name='add' action=\"fiche.php\" method=\"post\">\n";
+    print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
     print '<input type="hidden" name="action" value="add">';
     
     print_fiche_titre($langs->trans("NewVATPayment"));
diff --git a/htdocs/compta/voyage/index.php b/htdocs/compta/voyage/index.php
index f1bcc66edbb..8f4529386a6 100644
--- a/htdocs/compta/voyage/index.php
+++ b/htdocs/compta/voyage/index.php
@@ -77,6 +77,7 @@ $result = $db->query($sql);
 if ($result) {
 
   print "<form method=\"post\" action=\"index.php?viewall=$viewall&vline=$vline&account=$account\">";
+  print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
   print "<input type=\"hidden\" name=\"action\" value=\"add\">";
   print "<table class=\"border\" width=\"100%\" cellspacing=\"0\" cellpadding=\"2\">";
   print "<tr class=\"liste_titre\">";
diff --git a/htdocs/contrat/fiche.php b/htdocs/contrat/fiche.php
index f56d3ca45d0..4a585610710 100644
--- a/htdocs/contrat/fiche.php
+++ b/htdocs/contrat/fiche.php
@@ -896,6 +896,7 @@ else
 				else
 				{
 					print "<form name='update' action=\"fiche.php?id=$id\" method=\"post\">";
+					print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 					print '<input type="hidden" name="action" value="updateligne">';
 					print '<input type="hidden" name="elrowid" value="'.$_GET["rowid"].'">';
 					// Ligne carac
diff --git a/htdocs/domain/index.php b/htdocs/domain/index.php
index e1c5c97940b..008509fb95a 100644
--- a/htdocs/domain/index.php
+++ b/htdocs/domain/index.php
@@ -41,6 +41,7 @@ if ($result)
   print_barre_liste($langs->trans("DomainNames"), $page, "liste.php","",$sortfield,$sortorder,"",$num);
 
   print "<form method=\"post\" action=\"index.php?viewall=$viewall&vline=$vline&account=$account\">";
+  print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
   print "<input type=\"hidden\" name=\"action\" value=\"add\">";
   print "<table class=\"border\" width=\"100%\">";
   print "<tr class=\"liste_titre\">";
diff --git a/htdocs/fichinter/fiche.php b/htdocs/fichinter/fiche.php
index af676496a01..07a2b63c611 100644
--- a/htdocs/fichinter/fiche.php
+++ b/htdocs/fichinter/fiche.php
@@ -405,6 +405,7 @@ if ($_GET["action"] == 'create')
 	if ($_GET["socid"] > 0)
 	{
 		print "<form name='fichinter' action=\"fiche.php\" method=\"post\">";
+		print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 
 		print '<table class="border" width="100%">';
 
diff --git a/htdocs/fourn/product/categorie.php b/htdocs/fourn/product/categorie.php
index 445737a1b80..9898005e0d2 100644
--- a/htdocs/fourn/product/categorie.php
+++ b/htdocs/fourn/product/categorie.php
@@ -152,7 +152,8 @@ if ($_GET["id"])
   
   print $langs->trans("AddProductToCat")."<br/><br/>";
   print '<table class="border" width="100%">';
-  print "<form method='post' action='".DOL_URL_ROOT."/fourn/product/categorie.php?id=".$product->id."'>";
+  print '<form method="POST" action="'.DOL_URL_ROOT.'/fourn/product/categorie.php?id='.$product->id.'">';
+  print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
   print "<tr><td><select name='add_cat'><option value='-1'>".$langs->trans("Choose")."</option>";
   $cat = new Categorie($db);
   foreach ($cat->get_all_categories() as $categorie)
diff --git a/htdocs/html.formmail.class.php b/htdocs/html.formmail.class.php
index 7501740fd37..c6f6248fa77 100644
--- a/htdocs/html.formmail.class.php
+++ b/htdocs/html.formmail.class.php
@@ -177,6 +177,7 @@ class FormMail
 
 		print "\n<!-- Debut form mail -->\n";
 		print "<form method=\"post\" ENCTYPE=\"multipart/form-data\" action=\"".$this->param["returnurl"]."\">\n";
+		print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 		foreach ($this->param as $key=>$value)
 		{
 			print "<input type=\"hidden\" name=\"$key\" value=\"$value\">\n";
diff --git a/htdocs/postnuke/articles/fiche.php b/htdocs/postnuke/articles/fiche.php
index 094ed5b13b7..2bb6fd7ce72 100644
--- a/htdocs/postnuke/articles/fiche.php
+++ b/htdocs/postnuke/articles/fiche.php
@@ -68,6 +68,7 @@ if ($id)
 	  print_titre ("Edition de la fiche article");
 	  
 	  print "<form action=\"$fiche.php?id=$id\" method=\"post\">\n";
+	  print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 	  print "<input type=\"hidden\" name=\"action\" value=\"update\">";
 	  
 	  print '<table border="1" width="100%" cellspacing="0" cellpadding="4">';
diff --git a/htdocs/product/fiche.php b/htdocs/product/fiche.php
index d2e49968f33..85e3721f0ba 100644
--- a/htdocs/product/fiche.php
+++ b/htdocs/product/fiche.php
@@ -1008,6 +1008,7 @@ if ($_GET["id"] || $_GET["ref"])
 		{
 	  print "<!-- CUT HERE -->\n";
 	  print "<form action=\"fiche.php\" method=\"post\">\n";
+	  print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 	  print '<input type="hidden" name="action" value="update">';
 	  print '<input type="hidden" name="id" value="'.$product->id.'">';
 	  print '<input type="hidden" name="canvas" value="'.$product->canvas.'">';
diff --git a/htdocs/product/stock/fiche.php b/htdocs/product/stock/fiche.php
index 8b926a834dc..37e954a7010 100644
--- a/htdocs/product/stock/fiche.php
+++ b/htdocs/product/stock/fiche.php
@@ -133,6 +133,7 @@ if ($_GET["action"] == 'create')
 	print_fiche_titre($langs->trans("NewWarehouse"));
 	
 	print "<form action=\"fiche.php\" method=\"post\">\n";
+	print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 	print '<input type="hidden" name="action" value="add">';
 	print '<input type="hidden" name="type" value="'.$type.'">'."\n";
 
diff --git a/htdocs/product/stock/product.php b/htdocs/product/stock/product.php
index d28d6c38eda..e81f11ad60d 100644
--- a/htdocs/product/stock/product.php
+++ b/htdocs/product/stock/product.php
@@ -245,6 +245,7 @@ if ($_GET["id"] || $_GET["ref"])
 	{
 		print_titre($langs->trans("StockCorrection"));
 		print "<form action=\"product.php?id=$product->id\" method=\"post\">\n";
+		print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 		print '<input type="hidden" name="action" value="correct_stock">';
 		print '<table class="border" width="100%"><tr>';
 		print '<td width="20%">'.$langs->trans("Warehouse").'</td>';
@@ -275,6 +276,7 @@ if ($_GET["id"] || $_GET["ref"])
 	{
 		print_titre($langs->trans("Transfer"));
 		print "<form action=\"product.php?id=$product->id\" method=\"post\">\n";
+		print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 		print '<input type="hidden" name="action" value="transfert_stock">';
 		print '<table class="border" width="100%"><tr>';
 		print '<td width="20%">'.$langs->trans("WarehouseSource").'</td><td width="20%">';
@@ -300,6 +302,7 @@ if ($_GET["id"] || $_GET["ref"])
 	{
 		print_titre($langs->trans("SetStock"));
 		print "<form action=\"product.php?id=$product->id\" method=\"post\">\n";
+		print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 		print '<input type="hidden" name="action" value="create_stock">';
 		print '<table class="border" width="100%"><tr>';
 		print '<td width="20%">'.$langs->trans("Warehouse").'</td><td width="40%">';
diff --git a/htdocs/public/members/new.php b/htdocs/public/members/new.php
index 70bffff3c14..788d512fa8c 100644
--- a/htdocs/public/members/new.php
+++ b/htdocs/public/members/new.php
@@ -238,6 +238,7 @@ print '<li> Les champs Commencant par un <FONT COLOR="blue">*</FONT> seront affi
 print "</ul><BR>\n";
 
 print "<form action=\"new.php\" method=\"POST\">\n";
+print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 print '<input type="hidden" name="action" value="add">';
 
 print '<table cellspacing="0" border="1" width="100%" cellpadding="3">'."\n";
diff --git a/htdocs/searchpostalcode.php b/htdocs/searchpostalcode.php
index 1ed5358c0f2..070b6277e29 100644
--- a/htdocs/searchpostalcode.php
+++ b/htdocs/searchpostalcode.php
@@ -112,6 +112,7 @@ function change_categorie(urlbase,leselect)
 print "<div><div><br>";    // Ouvre 3 div a la place de top_menu car le llxFooter en ferme 3
 
 print "<form method=\"post\" action=\"javascript:MAJ(" . $_GET['targetobject'] . ");\" name=\"villes\" enctype=\"application/x-www-form-urlencoded\">";
+print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 print "<table class=\"noborder\" align=\"center\" width=\"90%\">";
 print "<tr class=\"liste_titre\">";
 print "  <td colspan=\"3\" align=\"center\">";
diff --git a/htdocs/societe/socnote.php b/htdocs/societe/socnote.php
index 64c0cf77d01..4b7261c2ba8 100644
--- a/htdocs/societe/socnote.php
+++ b/htdocs/societe/socnote.php
@@ -68,6 +68,7 @@ if ($socid > 0)
 	
 	
 	print "<form method=\"post\" action=\"".DOL_URL_ROOT."/societe/socnote.php\">";
+	print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 	
 	print '<table class="border" width="100%">';
 
diff --git a/htdocs/telephonie/adsl/fiche.php b/htdocs/telephonie/adsl/fiche.php
index 5d91f41417e..090870bb29f 100644
--- a/htdocs/telephonie/adsl/fiche.php
+++ b/htdocs/telephonie/adsl/fiche.php
@@ -394,7 +394,7 @@ elseif ($_GET["action"] == 'create_line' && $_GET["client"] > 0)
 	  print $socc->code_client;
 	  print '</td></tr>';
 	  print '</table><br /><br />';
-	  print 'Impossible de cr�er une ligne pour cette soci�t�, vous devez au pr�alablement lui affecter un code client.';
+	  print 'Impossible de cr�er une ligne pour cette societe, vous devez au prealablement lui affecter un code client.';
 	}
       elseif (strlen($socc->code_client) > 0 && $socc->check_codeclient() <> 0)
 	{
@@ -407,11 +407,12 @@ elseif ($_GET["action"] == 'create_line' && $_GET["client"] > 0)
 	  print $socc->code_client;
 	  print '</td></tr>';
 	  print '</table><br /><br />';
-	  print 'Le code client de cette soci�t� est incorrect, vous devez lui affecter un code client correct.';
+	  print 'Le code client de cette societe est incorrect, vous devez lui affecter un code client correct.';
 	}
       else
 	{
 	  print "<form action=\"fiche.php\" method=\"post\">\n";
+	  print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 	  print '<input type="hidden" name="action" value="add">';
 	  print '<input type="hidden" name="client" value="'.$socc->id.'">'."\n";
 	  if ($_GET['contratid'] > 0)
diff --git a/htdocs/telephonie/contrat/fiche.php b/htdocs/telephonie/contrat/fiche.php
index 7dbb82db978..d002d03339d 100644
--- a/htdocs/telephonie/contrat/fiche.php
+++ b/htdocs/telephonie/contrat/fiche.php
@@ -212,7 +212,7 @@ elseif ($_GET["action"] == 'create_line' && $_GET["client_comm"] > 0 && $user->r
 	  print $socc->code_client;
 	  print '</td></tr>';
 	  print '</table><br /><br />';
-	  print 'Impossible de cr�er un contrat pour cette soci�t�, vous devez au pr�alablement lui affecter un code client.';
+	  print 'Impossible de cr�er un contrat pour cette societe, vous devez au prealablement lui affecter un code client.';
 	}
       elseif (strlen($socc->code_client) > 0 && $socc->check_codeclient() <> 0)
 	{
@@ -225,11 +225,12 @@ elseif ($_GET["action"] == 'create_line' && $_GET["client_comm"] > 0 && $user->r
 	  print $socc->code_client;
 	  print '</td></tr>';
 	  print '</table><br /><br />';
-	  print 'Le code client de cette soci�t� est incorrect, vous devez lui affecter un code client correct.';
+	  print 'Le code client de cette societe est incorrect, vous devez lui affecter un code client correct.';
 	}
       else
 	{
 	  print "<form action=\"fiche.php\" method=\"post\">\n";
+	  print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 	  print '<input type="hidden" name="action" value="add">';
 	  print '<input type="hidden" name="client_comm" value="'.$socc->id.'">'."\n";
 	  
diff --git a/htdocs/telephonie/fournisseur/fiche.php b/htdocs/telephonie/fournisseur/fiche.php
index 3792e0c0262..6dafd4423a7 100644
--- a/htdocs/telephonie/fournisseur/fiche.php
+++ b/htdocs/telephonie/fournisseur/fiche.php
@@ -106,6 +106,7 @@ if ($_GET["action"] == 'create')
 {
   $fourn = new FournisseurTelephonie($db);
   print "<form action=\"fiche.php\" method=\"post\">\n";
+  print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
   print '<input type="hidden" name="action" value="add">';
 
   print_titre("Nouveau  fournisseur");
diff --git a/htdocs/telephonie/ligne/fiche.php b/htdocs/telephonie/ligne/fiche.php
index fa42daf5698..c7a088c59b9 100644
--- a/htdocs/telephonie/ligne/fiche.php
+++ b/htdocs/telephonie/ligne/fiche.php
@@ -948,6 +948,7 @@ else
 	      print_fiche_titre('Edition de la ligne', $mesg);
 	      
 	      print "<form action=\"fiche.php?id=$ligne->id\" method=\"post\">\n";
+	      print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 	      print '<input type="hidden" name="action" value="update">';
 	      
 	      print '<table class="border" width="100%" cellspacing="0" cellpadding="4">';
@@ -960,7 +961,7 @@ else
 	      print '</td></tr>';
 	      print '<input type="hidden" name="client_comm" value="'.$client_comm->id.'">'."\n";
 	      
-	      print '<tr><td width="20%">Num�ro</td><td>';
+	      print '<tr><td width="20%">Numero</td><td>';
 	      if ($ligne->statut == -1)
 		{
 		  print '<input name="numero" size="12" value="'.$ligne->numero.'">';
@@ -1101,6 +1102,7 @@ else
 	      print_fiche_titre('Ajouter un contact', $mesg);
 
 	      print "<form action=\"fiche.php?id=$ligne->id\" method=\"post\">\n";
+	      print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 	      print '<input type="hidden" name="action" value="addcontact">';
 
 	      print '<table class="border" width="100%" cellspacing="0" cellpadding="4">';
diff --git a/htdocs/telephonie/ligne/infoc.php b/htdocs/telephonie/ligne/infoc.php
index 2c1ade503ee..90f82b88a76 100644
--- a/htdocs/telephonie/ligne/infoc.php
+++ b/htdocs/telephonie/ligne/infoc.php
@@ -151,12 +151,12 @@ if ($_GET["id"] or $_GET["numero"])
 	      $cuser->fetch();
 	    }
 
-	  print '<tr><td width="20%">Ligne cr��e par</td><td colspan="2">'.$cuser->fullname.'</td></tr>';
+	  print '<tr><td width="20%">Ligne creee par</td><td colspan="2">'.$cuser->fullname.'</td></tr>';
 
 	  
 	  print '<tr><td width="20%">Code analytique</td><td colspan="2">'.$ligne->code_analytique.'&nbsp;</td></tr>';
 
-	  print '<tr><td width="20%">Mod�le de facture utilis�</td><td colspan="2">'.$ligne->pdfdetail.'</td></tr>';
+	  print '<tr><td width="20%">Modele de facture utilise</td><td colspan="2">'.$ligne->pdfdetail.'</td></tr>';
 
 	  
 	  print "</table>";
@@ -165,14 +165,15 @@ if ($_GET["id"] or $_GET["numero"])
       
       if ($_GET["action"] == 'edit' || $action == 're-edit')
 	{
-	  print_fiche_titre('Edition des informations compl�mentaires de la ligne', $mesg);
+	  print_fiche_titre('Edition des informations complementaires de la ligne', $mesg);
 	  
 	  print "<form action=\"infoc.php?id=$ligne->id\" method=\"post\">\n";
+	  print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 	  print '<input type="hidden" name="action" value="update">';
 	  
 	  print '<table class="border" width="100%" cellspacing="0" cellpadding="4">';
 	  
-	  print '<tr><td width="20%">Num�ro</td><td>'.$ligne->numero.'</td></tr>';
+	  print '<tr><td width="20%">Numero</td><td>'.$ligne->numero.'</td></tr>';
 	  
 	  $client = new Societe($db, $ligne->client_id);
 	  $client->fetch($ligne->client_id);
@@ -184,7 +185,7 @@ if ($_GET["id"] or $_GET["numero"])
 	  
 	  print '<tr><td width="20%">Code Analytique</td><td><input name="code_ana" size="13" maxlength="12" value="'.$ligne->code_analytique.'">&nbsp;</td></tr>';
 	  
-	  print '<tr><td>&nbsp;</td><td><input type="submit" value="Mettre � jour">';
+	  print '<tr><td>&nbsp;</td><td><input type="submit" value="Mettre a jour">';
 	  print '<a href="infoc.php?id='.$ligne->id.'">Annuler</a></td></tr>';
 	  print '</table>';
 	  print '</form>';	  
diff --git a/htdocs/telephonie/service/fiche.php b/htdocs/telephonie/service/fiche.php
index ecf9773b761..7f452f56d38 100644
--- a/htdocs/telephonie/service/fiche.php
+++ b/htdocs/telephonie/service/fiche.php
@@ -185,6 +185,7 @@ else
 	      print_fiche_titre('Edition du service', $mesg);
 	      
 	      print "<form action=\"fiche.php?id=$service->id\" method=\"post\">\n";
+	      print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 	      print '<input type="hidden" name="action" value="update">';
 	      
 	      print '<table class="border" width="100%" cellspacing="0" cellpadding="4">';
diff --git a/htdocs/user/note.php b/htdocs/user/note.php
index 1ef059e8273..eac624e9d8b 100644
--- a/htdocs/user/note.php
+++ b/htdocs/user/note.php
@@ -88,6 +88,7 @@ if ($id)
 	if ($msg) print '<div class="error">'.$msg.'</div>';
 
 	print "<form method=\"post\" action=\"note.php\">";
+	print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 
     print '<table class="border" width="100%">';