From 86d4840162043b17bfee056c8bd86b16a7bc8732 Mon Sep 17 00:00:00 2001
From: e107steved <steved@e107.org>
Date: Mon, 24 Oct 2011 19:43:47 +0000
Subject: [PATCH] Use e_token for comments

---
 e107_handlers/comment_class.php | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/e107_handlers/comment_class.php b/e107_handlers/comment_class.php
index 0fd252595..68fa13243 100644
--- a/e107_handlers/comment_class.php
+++ b/e107_handlers/comment_class.php
@@ -158,7 +158,8 @@ class comment
 			$text .= $rate."<tr> \n
 			<td style='width:20%; vertical-align:top;'>".COMLAN_8.":</td>\n<td id='commentform' style='width:80%;'>\n<textarea class='e-wysiwyg tbox comment' id='comment' name='comment' cols='62' rows='7' onselect='storeCaret(this);' onclick='storeCaret(this);' onkeyup='storeCaret(this);'>".trim($comval)."</textarea>\n<br />
 			".display_help('helpb', "comment")."</td></tr>\n<tr style='vertical-align:top'> \n<td style='width:20%'>".$text2."</td>\n
-			<td id='commentformbutton' style='width:80%;'>\n
+			<td id='commentformbutton' style='width:80%;'>
+			<input type='hidden' name='e-token' value='".e_TOKEN."' />\n
 			".(isset($action) && $action == "reply" ? "<input type='hidden' name='pid' value='{$id}' />" : '').(isset($eaction) && $eaction == "edit" ? "<input type='hidden' name='editpid' value='{$id}' />" : "").(isset($content_type) && $content_type ? "<input type='hidden' name='content_type' value='{$content_type}' />" : '')."<input class='button' type='submit' name='".$action."submit' value='".(isset($eaction) && $eaction == "edit" ? COMLAN_320 : COMLAN_9)."' />\n</td>\n</tr>\n</table>\n</form></div>";
 			if ($tablerender)
 			{
@@ -725,7 +726,7 @@ class comment
 			}
 		}
 
-		if (($lock != '1') && ($this->getCommentPermissions() === 'rw'))
+		if ($lock != '1')
 		{
 			$comment = $this->form_comment($action, $table, $id, $subject, "", TRUE, $rate, $tablerender);
 		}