Fix CSRF vulnerabilities

[sql-web.git] / contact.php

diff --git a/contact.php b/contact.php
index 23fc0764dfd03564a480f839369b800a9425b4c7..d0e68af8c3ceb44ebc6548c886818b324381f7b2 100644 (file)
--- a/contact.php
+++ b/contact.php
@@ -1,8 +1,15 @@
 <?php
+/*
+       (c) 2005 Joe Presbrey
+*/
 
 require_once('mitsql.cfg.php');
 require_once('mitsql.lib.php');
 
+if (isOnline()) {
+       $User = new User($Login->getUserID());
+}
+
 include 'tpl/contact.php';
 
 ?>