diff --git a/htdocs/imports/import.php b/htdocs/imports/import.php
index a84b255601d..0819ce0ac30 100644
--- a/htdocs/imports/import.php
+++ b/htdocs/imports/import.php
@@ -823,6 +823,7 @@ if ($step == 4 && $datatoimport)
 		print '<tr><td>'.$langs->trans("CsvOptions").'</td>';
 		print '<td>';
 		print '<form>';
+		print '<input type="hidden" name="token" value="'.newToken().'">';
 		print '<input type="hidden" value="'.$step.'" name="step">';
 		print '<input type="hidden" value="'.$format.'" name="format">';
 		print '<input type="hidden" value="'.$excludefirstline.'" name="excludefirstline">';
@@ -1249,6 +1250,7 @@ if ($step == 5 && $datatoimport)
 
 
     print '<form action="'.$_SERVER["PHP_SELF"].'?'.$param2.'" method="POST">';
+    print '<input type="hidden" name="token" value="'.newToken().'">';
     print '<input type="hidden" name="step" value="5">'; // step 5
     print '<input type="hidden" name="action" value="launchsimu">'; // step 5