Update createArticle.php

content/createArticle.php

@@ -27,6 +27,8 @@ $blocks = array_values($blocks); // sequentielle Indizes 0..n-1 sicherstellen
 -->
 <form method="post" action="php/controller/createArticle-controller.php" id="editor-form" enctype="multipart/form-data" class="article-editor-scope.editor-container article-editor-scope editor-container">
 
+    <?php csrf_field(); ?>
+
     <main class="editor-main">
         <?php include_once "includes/alertMessages.php"?>
 

content/updateArticle.php

@@ -27,6 +27,8 @@ $blocks = array_values($blocks);
 -->
 <form method="post" action="php/controller/updateArticle-controller.php?id=<?php if(isset($id) && !empty($id)){echo htmlspecialchars($id);}else{$_SESSION["message"] = "missing_id";} ?>" id="editor-form" enctype="multipart/form-data" class="article-editor-scope.editor-container article-editor-scope editor-container">
 
+    <?php csrf_field(); ?>
+
     <main class="editor-main">
         <?php include_once "includes/alertMessages.php"?>