From 604e40323decccbaf8974b5457b3f6da3a6e3f4c Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Fr=C3=A9d=C3=A9ric=20FRANCE?=
 <frederic34@users.noreply.github.com>
Date: Thu, 9 Jan 2020 11:01:15 +0100
Subject: [PATCH 1/4] Update index.php

---
 htdocs/opensurvey/wizard/index.php | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/htdocs/opensurvey/wizard/index.php b/htdocs/opensurvey/wizard/index.php
index 63f83655d49..77e8418f31b 100644
--- a/htdocs/opensurvey/wizard/index.php
+++ b/htdocs/opensurvey/wizard/index.php
@@ -2,6 +2,7 @@
 /* Copyright (C) 2013	Laurent Destailleur	<eldy@users.sourceforge.net>
  * Copyright (C) 2014	Marcos García		<marcosgdf@gmail.com>
  * Copyright (C) 2016	Regis Houssin		<regis.houssin@inodbox.com>
+ * Copyright (C) 2019       Frédéric France     <frederic.france@netlogic.fr>
  *
  * This program is free software; you can redistribute it and/or modify
  * it under the terms of the GNU General Public License as published by
@@ -41,6 +42,7 @@ llxHeader('', $langs->trans("Survey"), '', "", 0, 0, $arrayofjs, $arrayofcss);
 print load_fiche_titre($langs->trans("CreatePoll"));
 
 print '<form name="formulaire" action="create_survey.php" method="POST">';
+print '<input type="hidden" name="token" value="'.newToken().'">';
 print '<div class="center">';
 print '<p>'.$langs->trans("OrganizeYourMeetingEasily").'</p>';
 print '<div class="corps">';

From 53748b5e2ec27c51b1633c9a297ef15b8a949e55 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Fr=C3=A9d=C3=A9ric=20FRANCE?=
 <frederic34@users.noreply.github.com>
Date: Thu, 9 Jan 2020 11:02:39 +0100
Subject: [PATCH 2/4] Update create_survey.php

---
 htdocs/opensurvey/wizard/create_survey.php | 1 +
 1 file changed, 1 insertion(+)

diff --git a/htdocs/opensurvey/wizard/create_survey.php b/htdocs/opensurvey/wizard/create_survey.php
index 0f71b0ceabf..7bb7861edbe 100644
--- a/htdocs/opensurvey/wizard/create_survey.php
+++ b/htdocs/opensurvey/wizard/create_survey.php
@@ -136,6 +136,7 @@ print load_fiche_titre($langs->trans("CreatePoll").' (1 / 2)');
 
 // debut du formulaire
 print '<form name="formulaire" action="" method="POST">'."\n";
+print '<input type="hidden" name="token" value="'.newToken().'">';
 
 dol_fiche_head();
 

From 965f56cf9ddd05d94dbe0cdfe3cab953a6662c6d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Fr=C3=A9d=C3=A9ric=20FRANCE?=
 <frederic34@users.noreply.github.com>
Date: Thu, 9 Jan 2020 11:03:06 +0100
Subject: [PATCH 3/4] Update choix_autre.php

---
 htdocs/opensurvey/wizard/choix_autre.php | 1 +
 1 file changed, 1 insertion(+)

diff --git a/htdocs/opensurvey/wizard/choix_autre.php b/htdocs/opensurvey/wizard/choix_autre.php
index f8a3e13b80a..cb3ed346a52 100644
--- a/htdocs/opensurvey/wizard/choix_autre.php
+++ b/htdocs/opensurvey/wizard/choix_autre.php
@@ -119,6 +119,7 @@ if (empty($_SESSION['titre']))
 //On prépare les données pour les inserer dans la base
 
 print '<form name="formulaire" action="#bas" method="POST">'."\n";
+print '<input type="hidden" name="token" value="'.newToken().'">';
 
 print load_fiche_titre($langs->trans("CreatePoll").' (2 / 2)');
 

From b65e39b5cf774d19c5f5cb19386a365a2fefae32 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Fr=C3=A9d=C3=A9ric=20FRANCE?=
 <frederic34@users.noreply.github.com>
Date: Thu, 9 Jan 2020 11:04:53 +0100
Subject: [PATCH 4/4] Update choix_date.php

---
 htdocs/opensurvey/wizard/choix_date.php | 1 +
 1 file changed, 1 insertion(+)

diff --git a/htdocs/opensurvey/wizard/choix_date.php b/htdocs/opensurvey/wizard/choix_date.php
index 3692f79048e..a891d9530d9 100644
--- a/htdocs/opensurvey/wizard/choix_date.php
+++ b/htdocs/opensurvey/wizard/choix_date.php
@@ -328,6 +328,7 @@ else
 
 //Debut du formulaire et bandeaux de tete
 print '<form name="formulaire" action="" method="POST">'."\n";
+print '<input type="hidden" name="token" value="'.newToken().'">';
 
 print load_fiche_titre($langs->trans("CreatePoll").' (2 / 2)');