Version 4.1.19

applications/core/modules/front/system/widgets.php

@@ -2,9 +2,9 @@
 /**
  * @brief		Sidebar Widgets
  * @author		<a href='http://www.invisionpower.com'>Invision Power Services, Inc.</a>
- * @copyright	(c) 2001 - SVN_YYYY Invision Power Services, Inc.
+ * @copyright	(c) 2001 - 2016 Invision Power Services, Inc.
  * @license		http://www.invisionpower.com/legal/standards/
- * @package		IPS Social Suite
+ * @package		IPS Community Suite
  * @since		19 Nov 2013
  * @version		SVN_VERSION_NUMBER
  */
@@ -237,6 +237,8 @@ class _widgets extends \IPS\Dispatcher\Controller
 		{
 			\IPS\Output::i()->error( 'invalid_widget_area', '3S172/2', 403, '' );
 		}
+
+		\IPS\Session::i()->csrfCheck();
 		
 		$newOrder = array();
 		$seen     = array();