diff --git a/content/createArticle.php b/content/createArticle.php
index c682836..1dd03ea 100644
--- a/content/createArticle.php
+++ b/content/createArticle.php
@@ -27,6 +27,8 @@ $blocks = array_values($blocks); // sequentielle Indizes 0..n-1 sicherstellen
 -->
 <form method="post" action="php/controller/createArticle-controller.php" id="editor-form" enctype="multipart/form-data" class="article-editor-scope.editor-container article-editor-scope editor-container">
 
+    <?php csrf_field(); ?>
+
     <main class="editor-main">
         <?php include_once "includes/alertMessages.php"?>