@@ -259,10 +259,11 @@
   }else{
     needHrefJs = 1;
     @ <form method="POST" data-action='%s(zLink)' action='%R/login' \
     @ %s(zOtherArgs)>
   }
+  login_insert_csrf_secret();
 }
 
 /*
 ** Add a new element to the submenu
 */