From d214a9c8ecac4ba2b06c7e445b3e3f468460668b Mon Sep 17 00:00:00 2001
From: Guillaume Pellerin <guillaume.pellerin@ircam.fr>
Date: Tue, 22 Sep 2015 02:14:44 +0200
Subject: [PATCH] fix csrf

---
 diggersdigest/templates/index.html        | 2 +-
 diggersdigest/templates/shop/product.html | 6 ++++--
 2 files changed, 5 insertions(+), 3 deletions(-)

diff --git a/diggersdigest/templates/index.html b/diggersdigest/templates/index.html
index 7dc0826..0934d0a 100644
--- a/diggersdigest/templates/index.html
+++ b/diggersdigest/templates/index.html
@@ -1,5 +1,6 @@
 {% extends "base.html" %}
 {% load i18n %}
+{% load blog_tags records_tags keyword_tags i18n mezzanine_tags %}
 
 {% block meta_title %}{% trans "Home" %}{% endblock %}
 {% comment %}
@@ -11,7 +12,6 @@
 {% endblock %}
 
 {% block main %}
-{% load blog_tags records_tags keyword_tags i18n mezzanine_tags %}
 
 <div class="col-xs-6 col-md-6"><!-- Showcase-->
 {% shop_recent_products limit=2 category="Showcase" as recent_products %}
diff --git a/diggersdigest/templates/shop/product.html b/diggersdigest/templates/shop/product.html
index 6e53529..e49718b 100644
--- a/diggersdigest/templates/shop/product.html
+++ b/diggersdigest/templates/shop/product.html
@@ -154,8 +154,10 @@ $(function () {
 
 {% errors_for add_product_form %}
 
-<form method="post" id="add-cart" class="shop-form">
-    <!-- {% fields_for add_product_form %} -->
+<form method="post" id="add-cart" class="shop-form">{% csrf_token %}
+    <div style="display: none;">
+    {% fields_for add_product_form %}
+    </div>
     <div class="form-actions">
         <input type="submit" class="btn btn-primary btn-lg pull-right" name="add_cart" value="{% trans "Add to cart" %}">
         {% if settings.SHOP_USE_WISHLIST %}
-- 
2.39.5