diff --git a/htdocs/contact/fiche.php b/htdocs/contact/fiche.php
index 98c6feeec4a..7ff810d91c8 100644
--- a/htdocs/contact/fiche.php
+++ b/htdocs/contact/fiche.php
@@ -254,6 +254,7 @@ if ($user->rights->societe->contact->creer)
 
 		print '<br>';
 		print '<form method="post" action="fiche.php">';
+		print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 		print '<input type="hidden" name="action" value="add">';
 		print '<table class="border" width="100%">';
 
@@ -344,6 +345,7 @@ if ($user->rights->societe->contact->creer)
 		}
 
 		print '<form method="post" action="fiche.php?id='.$_GET["id"].'">';
+		print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 		print '<input type="hidden" name="id" value="'.$_GET["id"].'">';
 		print '<input type="hidden" name="action" value="update">';
 		print '<input type="hidden" name="contactid" value="'.$contact->id.'">';
diff --git a/htdocs/contact/index.php b/htdocs/contact/index.php
index 1beb51b0f7e..98dcbf40f51 100644
--- a/htdocs/contact/index.php
+++ b/htdocs/contact/index.php
@@ -207,6 +207,7 @@ if ($result)
     print_barre_liste($titre ,$page, "index.php", '&amp;begin='.$begin.'&amp;view='.$_GET["view"].'&amp;userid='.$_GET["userid"], $sortfield, $sortorder,'',$num,$nbtotalofrecords);
 
     print '<form method="post" action="index.php">';
+    print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
     print '<input type="hidden" name="view" value="'.$view.'">';
     print '<input type="hidden" name="sortfield" value="'.$sortfield.'">';
     print '<input type="hidden" name="sortorder" value="'.$sortorder.'">';
diff --git a/htdocs/contact/perso.php b/htdocs/contact/perso.php
index 7c5a0f89ef1..bb439c6e6b3 100644
--- a/htdocs/contact/perso.php
+++ b/htdocs/contact/perso.php
@@ -95,6 +95,7 @@ if ($_GET["action"] == 'edit')
     print '<table class="border" width="100%">';
 
     print '<form name="perso" method="post" action="perso.php?id='.$_GET["id"].'">';
+    print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
     print '<input type="hidden" name="action" value="update">';
     print '<input type="hidden" name="contactid" value="'.$contact->id.'">';
 
diff --git a/htdocs/contrat/contact.php b/htdocs/contrat/contact.php
index 0ba546d22f8..ffaefb2fad4 100644
--- a/htdocs/contrat/contact.php
+++ b/htdocs/contrat/contact.php
@@ -230,6 +230,7 @@ if ($id > 0)
 			$var = false;
 
 			print '<form action="contact.php?id='.$id.'" method="post">';
+			print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 			print '<input type="hidden" name="action" value="addcontact">';
 			print '<input type="hidden" name="source" value="internal">';
 			print '<input type="hidden" name="id" value="'.$id.'">';
@@ -258,6 +259,7 @@ if ($id > 0)
             print '</form>';
 
 			print '<form action="contact.php?id='.$id.'" method="post">';
+			print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 			print '<input type="hidden" name="action" value="addcontact">';
 			print '<input type="hidden" name="source" value="external">';
 			print '<input type="hidden" name="id" value="'.$id.'">';
diff --git a/htdocs/contrat/fiche.php b/htdocs/contrat/fiche.php
index 8fb3a67ebc0..f56d3ca45d0 100644
--- a/htdocs/contrat/fiche.php
+++ b/htdocs/contrat/fiche.php
@@ -462,6 +462,7 @@ if ($_GET["action"] == 'create')
             $soc->fetch($obj->rowid);
 
             print '<form name="contrat" action="fiche.php" method="post">';
+            print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 
             print '<input type="hidden" name="action" value="add">';
             print '<input type="hidden" name="socid" value="'.$soc->id.'">'."\n";
@@ -682,6 +683,7 @@ else
         if ($contrat->brouillon && $user->rights->contrat->creer)
         {
             print '<form action="fiche.php?id='.$id.'" method="post">';
+            print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
             print '<input type="hidden" name="action" value="setremise">';
         }
 
@@ -1066,6 +1068,7 @@ else
 				 * Activer la ligne de contrat
 				 */
 				print '<form name="active" action="'.$_SERVER["PHP_SELF"].'?id='.$contrat->id.'&amp;ligne='.$_GET["ligne"].'&amp;action=active" method="post">';
+				print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 
 				print '<table class="noborder" width="100%">';
 				//print '<tr class="liste_titre"><td colspan="5">'.$langs->trans("Status").'</td></tr>';
@@ -1115,6 +1118,7 @@ else
 				 * Desactiver la ligne de contrat
 				 */
 				print '<form name="closeline" action="'.$_SERVER["PHP_SELF"].'?id='.$contrat->id.'&amp;ligne='.$contrat->lignes[$cursorline-1]->id.'&amp;action=closeline" method="post">';
+				print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 
 				print '<table class="noborder" width="100%">';
 
@@ -1189,6 +1193,7 @@ else
 
 			// Service sur produit predefini
 			print '<form name="addligne" action="'.$_SERVER["PHP_SELF"].'?id='.$id.'" method="post">';
+			print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 			print '<input type="hidden" name="action" value="addligne">';
 			print '<input type="hidden" name="mode" value="predefined">';
 			print '<input type="hidden" name="id" value="'.$id.'">';
@@ -1224,6 +1229,7 @@ else
 
 			// Service libre
 			print '<form name="addligne_sl" action="'.$_SERVER["PHP_SELF"].'?id='.$id.'" method="post">';
+			print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 			print '<input type="hidden" name="action" value="addligne">';
 			print '<input type="hidden" name="mode" value="libre">';
 			print '<input type="hidden" name="id" value="'.$id.'">';
diff --git a/htdocs/contrat/index.php b/htdocs/contrat/index.php
index c724fd8eaae..1a90c8532f8 100644
--- a/htdocs/contrat/index.php
+++ b/htdocs/contrat/index.php
@@ -81,6 +81,7 @@ if ($conf->contrat->enabled)
 {
     $var=false;
 	print '<form method="post" action="'.DOL_URL_ROOT.'/contrat/liste.php">';
+	print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 	print '<table class="noborder" width="100%">';
 	print '<tr class="liste_titre"><td colspan="3">'.$langs->trans("SearchAContract").'</td></tr>';
 	print '<tr '.$bc[$var].'>';
diff --git a/htdocs/contrat/liste.php b/htdocs/contrat/liste.php
index 218fa21827e..8da71fa6591 100644
--- a/htdocs/contrat/liste.php
+++ b/htdocs/contrat/liste.php
@@ -113,6 +113,7 @@ if ($resql)
     print "</tr>\n";
 
     print '<form method="POST" action="liste.php">';
+    print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
     print '<tr class="liste_titre">';
     print '<td class="liste_titre">';
     print '<input type="text" class="flat" size="3" name="search_contract" value="'.$search_contract.'">';
diff --git a/htdocs/contrat/note.php b/htdocs/contrat/note.php
index 6284f00b992..9ff5046f423 100644
--- a/htdocs/contrat/note.php
+++ b/htdocs/contrat/note.php
@@ -132,6 +132,7 @@ if ($_GET["id"])
     if ($_GET["action"] == 'edit')
     {
         print '<form method="post" action="note.php?id='.$contrat->id.'">';
+        print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
         print '<input type="hidden" name="action" value="update_public">';
         print '<textarea name="note_public" cols="80" rows="'.ROWS_8.'">'.$contrat->note_public."</textarea><br>";
         print '<input type="submit" class="button" value="'.$langs->trans("Save").'">';
@@ -151,6 +152,7 @@ if ($_GET["id"])
 	    if ($_GET["action"] == 'edit')
 	    {
 	        print '<form method="post" action="note.php?id='.$contrat->id.'">';
+	        print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 	        print '<input type="hidden" name="action" value="update">';
 	        print '<textarea name="note" cols="80" rows="'.ROWS_8.'">'.$contrat->note."</textarea><br>";
 	        print '<input type="submit" class="button" value="'.$langs->trans("Save").'">';
diff --git a/htdocs/contrat/services.php b/htdocs/contrat/services.php
index d568dbc335c..33681479fa6 100644
--- a/htdocs/contrat/services.php
+++ b/htdocs/contrat/services.php
@@ -140,6 +140,7 @@ if ($resql)
     print "</tr>\n";
 
     print '<form method="POST" action="services.php">';
+    print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
     print '<tr class="liste_titre">';
     print '<td class="liste_titre">';
     print '<input type="hidden" name="filter" value="'.$filter.'">';
diff --git a/htdocs/ecm/docdir.php b/htdocs/ecm/docdir.php
index d186f0e8e7b..306de9d2260 100644
--- a/htdocs/ecm/docdir.php
+++ b/htdocs/ecm/docdir.php
@@ -147,6 +147,7 @@ if ($_GET["action"] == 'create')
 	// Create
 	//***********************
 	print '<form action="'.$_SERVER["PHP_SELF"].'" method="post">';
+	print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 	print '<input type="hidden" name="action" value="add">';
 
 	$title=$langs->trans("ECMNewSection");
diff --git a/htdocs/ecm/docfile.php b/htdocs/ecm/docfile.php
index 419a0de1f11..a0a6f7902c3 100644
--- a/htdocs/ecm/docfile.php
+++ b/htdocs/ecm/docfile.php
@@ -119,6 +119,7 @@ dol_fiche_head($head, 'card', $langs->trans("ECMSectionManual"));
 if ($_GET["action"] == 'edit')
 {
 	print '<form name="update" action="'.$_SERVER["PHP_SELF"].'" method="POST">';
+	print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 	print '<input type="hidden" name="fileid" value="'.$fileid.'">';
 	print '<input type="hidden" name="action" value="update">';
 }
diff --git a/htdocs/ecm/docmine.php b/htdocs/ecm/docmine.php
index 0cb263f661a..d764c27692d 100644
--- a/htdocs/ecm/docmine.php
+++ b/htdocs/ecm/docmine.php
@@ -228,6 +228,7 @@ dol_fiche_head($head, 'card', $langs->trans("ECMSectionManual"));
 if ($_GET["action"] == 'edit')
 {
 	print '<form name="update" action="'.$_SERVER["PHP_SELF"].'" method="POST">';
+	print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 	print '<input type="hidden" name="section" value="'.$section.'">';
 	print '<input type="hidden" name="action" value="update">';
 }
diff --git a/htdocs/ecm/search.php b/htdocs/ecm/search.php
index e316c9e18d5..c1203a1c841 100644
--- a/htdocs/ecm/search.php
+++ b/htdocs/ecm/search.php
@@ -140,6 +140,7 @@ print '<table class="nobordernopadding" width="100%"><tr><td valign="top">';
 //print_fiche_titre($langs->trans("ECMSectionsManual"));
 
 print '<form method="post" action="'.DOL_URL_ROOT.'/ecm/search.php">';
+print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 print '<table class="nobordernopadding" width="100%">';
 print "<tr class=\"liste_titre\">";
 print '<td colspan="2">'.$langs->trans("ECMSearchByKeywords").'</td></tr>';
@@ -153,6 +154,7 @@ print "</table></form>";
 //print_fiche_titre($langs->trans("ECMSectionAuto"));
 
 print '<form method="post" action="'.DOL_URL_ROOT.'/ecm/search.php">';
+print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 print '<table class="noborder" width="100%">';
 print "<tr class=\"liste_titre\">";
 print '<td colspan="4">'.$langs->trans("ECMSearchByEntity").'</td></tr>';
diff --git a/htdocs/energie/compteur.php b/htdocs/energie/compteur.php
index 0b01764a922..8bb55f5db9f 100644
--- a/htdocs/energie/compteur.php
+++ b/htdocs/energie/compteur.php
@@ -92,6 +92,7 @@ if ($_GET["action"] == 'create')
   $compteur = new EnergieCompteur($db, $user);
 
   print '<form action="compteur.php" method="post">';
+  print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
   print '<input type="hidden" name="action" value="add">';
   
   print '<table class="border" width="100%">';
@@ -156,6 +157,7 @@ else
 	      
 	  $html = new Form($db);
 	  print '<form name="addvalue" action="compteur.php?id='.$compteur->id.'" method="post">';
+	  print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 	  print '<input type="hidden" name="action" value="addvalue">';
 	  print '<table class="border" width="100%">';	  
 
diff --git a/htdocs/energie/compteur_groupe.php b/htdocs/energie/compteur_groupe.php
index 78b708fdcbc..b0a328d86f3 100644
--- a/htdocs/energie/compteur_groupe.php
+++ b/htdocs/energie/compteur_groupe.php
@@ -82,6 +82,7 @@ if ($_GET["id"] > 0)
       
       $html = new Form($db);
       print '<form action="compteur_groupe.php?id='.$compteur->id.'" method="post">';
+      print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
       print '<input type="hidden" name="action" value="addvalue">';
       print '<table class="border" width="100%">';	  
       
diff --git a/htdocs/energie/groupe.php b/htdocs/energie/groupe.php
index 620f570332f..d4920b19bf8 100644
--- a/htdocs/energie/groupe.php
+++ b/htdocs/energie/groupe.php
@@ -71,6 +71,7 @@ if ($_GET["action"] == 'create')
   $html = new Form($db);
 
   print '<form action="groupe.php" method="post">';
+  print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
   print '<input type="hidden" name="action" value="add">';
   
   print '<table class="border" width="100%">';