From 21236b2fb9b4c7f18ca18c8c6d24d0105885b08c Mon Sep 17 00:00:00 2001
From: Flavio Copes <copesc@gmail.com>
Date: Mon, 9 Nov 2015 15:09:48 +0100
Subject: [PATCH] User admin-form as action for the nonce. Add it to the login
 form too

---
 themes/grav/templates/partials/blueprints-new.html.twig | 2 +-
 themes/grav/templates/partials/blueprints-raw.html.twig | 2 +-
 themes/grav/templates/partials/blueprints.html.twig     | 2 +-
 themes/grav/templates/partials/login.html.twig          | 2 ++
 4 files changed, 5 insertions(+), 3 deletions(-)

diff --git a/themes/grav/templates/partials/blueprints-new.html.twig b/themes/grav/templates/partials/blueprints-new.html.twig
index c8ad9d71..50504043 100644
--- a/themes/grav/templates/partials/blueprints-new.html.twig
+++ b/themes/grav/templates/partials/blueprints-new.html.twig
@@ -15,6 +15,6 @@
         <button class="button primary">{{ "PLUGIN_ADMIN.CONTINUE"|tu }}</button>
     </div>
 
-    {{ nonce_field('admin-post-blueprints', 'admin-nonce') }}
+    {{ nonce_field('admin-form', 'admin-nonce') }}
 
 </form>
diff --git a/themes/grav/templates/partials/blueprints-raw.html.twig b/themes/grav/templates/partials/blueprints-raw.html.twig
index 91fe6a39..6e2047f9 100644
--- a/themes/grav/templates/partials/blueprints-raw.html.twig
+++ b/themes/grav/templates/partials/blueprints-raw.html.twig
@@ -11,6 +11,6 @@
         {% endif %}
     {% endfor %}
 
-    {{ nonce_field('admin-post-blueprints', 'admin-nonce') }}
+    {{ nonce_field('admin-form', 'admin-nonce') }}
 
 </form>
diff --git a/themes/grav/templates/partials/blueprints.html.twig b/themes/grav/templates/partials/blueprints.html.twig
index deb0066b..f003debf 100644
--- a/themes/grav/templates/partials/blueprints.html.twig
+++ b/themes/grav/templates/partials/blueprints.html.twig
@@ -19,5 +19,5 @@
     {% endfor %}
     {% endif %}
 
-    {{ nonce_field('admin-post-blueprints', 'admin-nonce') }}
+    {{ nonce_field('admin-form', 'admin-nonce') }}
 </form>
diff --git a/themes/grav/templates/partials/login.html.twig b/themes/grav/templates/partials/login.html.twig
index 28935bae..40fffab0 100644
--- a/themes/grav/templates/partials/login.html.twig
+++ b/themes/grav/templates/partials/login.html.twig
@@ -10,6 +10,8 @@
 
         <form method="post" action="{{ base_url_relative }}">
             {% block form %}{% endblock %}
+
+            {{ nonce_field('admin-form', 'admin-nonce') }}
         </form>
     </section>
 {% endblock %}
\ No newline at end of file