From da3d7d85da284665412c0e97d23605c6cfc329cc Mon Sep 17 00:00:00 2001
From: KANE LAZENI <lkane@ebene.info>
Date: Thu, 7 May 2026 06:47:27 +0000
Subject: [PATCH] a

---
 Vue/Chambre/index.php                 | 3 +++
 Vue/Consultation/index.php            | 4 ++++
 Vue/Miseenobservation/index.php       | 3 +++
 Vue/Prescriptionseance/index.php      | 4 ++++
 Vue/Proformahospitalisation/index.php | 3 +++
 5 files changed, 17 insertions(+)

diff --git a/Vue/Chambre/index.php b/Vue/Chambre/index.php
index f082c3b..022ec79 100755
--- a/Vue/Chambre/index.php
+++ b/Vue/Chambre/index.php
@@ -80,6 +80,8 @@
 	}
 	
 	$prixActeModifiable = $_SESSION['p_prixActeModifiable'];
+
+	$token = $_SESSION['csrf_token_submieted'];	
 ?>
 
 <input class="sr-only" id="avisHospitalisation" name="avisHospitalisation"  type="text" value= "<?= $avisHospitalisation; ?>" >
@@ -121,6 +123,7 @@
 
 <button type="button" class="sr-only" id="btn_imprimer_chambre"  name="btn_imprimer_chambre" data-bs-toggle="modal" data-bs-target="#pop_imprimer_chambre"  style='font-size:10pt;' > </button>
 
+<input type="hidden" id="csrf_token" name="csrf_token" value="<?= htmlspecialchars($token) ?>">
 
 <?php if ($numeroBonHospitalisation<="0" && $badcodeGestionBon=="1") : ?>
 	<div class="alert alert-danger" style="height:35px; padding:5px; text-align:center;" >
diff --git a/Vue/Consultation/index.php b/Vue/Consultation/index.php
index b755517..4e5c838 100755
--- a/Vue/Consultation/index.php
+++ b/Vue/Consultation/index.php
@@ -24,6 +24,8 @@
 	$codePrestataire 		  			= $_SESSION['p_codePrestataire_C'];
 	
 	$faceActif 							= "0";
+
+	$token = $_SESSION['csrf_token_submieted'];	
 ?>
 
 <input class="sr-only" id="badcodeGestionBon" 				name="badcodeGestionBon" 				type="text" 	value= "<?= $badcodeGestionBon ?>" >
@@ -47,6 +49,8 @@
 <INPUT class="sr-only" TYPE="text" id="nomForm" NAME="nomForm" value="consultation">
 <INPUT class="sr-only" TYPE="text" id="faceActif" name="faceActif" value="0">
 
+<input type="hidden" id="csrf_token" name="csrf_token" value="<?= htmlspecialchars($token) ?>">
+
 <div id="div_findelaicarence">		
 	
 </div>
diff --git a/Vue/Miseenobservation/index.php b/Vue/Miseenobservation/index.php
index 6da7b9d..ae68d08 100755
--- a/Vue/Miseenobservation/index.php
+++ b/Vue/Miseenobservation/index.php
@@ -15,6 +15,8 @@
 	$prixActeModifiable = $_SESSION['p_prixActeModifiable'];
 
 	$motif = $miseEnObs['motif'];
+
+	$token = $_SESSION['csrf_token_submieted'];	
 ?>
 
 <input class="sr-only" id="codeTypePrestation" 	name="codeTypePrestation" 	type="text" value="ACT"> 
@@ -27,6 +29,7 @@
 <INPUT class="sr-only" id="bonCaduc" 			name="bonCaduc" 			type="text" value="<?= $bonCaduc ?>">
 <INPUT class="sr-only" id="facture" 			name="facture" 				type="text" value="<?= $facture; ?>">
 <INPUT class="sr-only" id="modeSaisieFacture" 	name="modeSaisieFacture" 	type="text" value="<?= $modeSaisieFacture ?>">
+<input type="hidden" id="csrf_token" name="csrf_token" value="<?= htmlspecialchars($token) ?>">
 
 <div id="div_contestation"></div>
 
diff --git a/Vue/Prescriptionseance/index.php b/Vue/Prescriptionseance/index.php
index fac2fc5..0044b96 100755
--- a/Vue/Prescriptionseance/index.php
+++ b/Vue/Prescriptionseance/index.php
@@ -53,6 +53,8 @@
 
 	$valeurActe = $this->nettoyer($seance['valeurActe']);
 	$prixActe = $valeurActe;
+
+	$token = $_SESSION['csrf_token_submieted'];	
 ?>
 
 <script type="text/javascript">
@@ -65,6 +67,8 @@
 <input class="sr-only" type="text" id="datePrescription" name="datePrescription" value="<?= dateLang($this->nettoyer($seance['datePrescription'])) ?>">
 <input class="sr-only" type="text" id="prescriptionSiCritereBareme" name="prescriptionSiCritereBareme" value="<?= $_SESSION['p_prescriptionSiCritereBareme_C'] ?>" >
 
+<input type="hidden" id="csrf_token" name="csrf_token" value="<?= htmlspecialchars($token) ?>">
+
 <div id="div_contestation"></div>
 
 <?php if ($numeroBonKine<="0" && $badcodeGestionBon=="1") : ?>
diff --git a/Vue/Proformahospitalisation/index.php b/Vue/Proformahospitalisation/index.php
index db74e7e..d47c786 100755
--- a/Vue/Proformahospitalisation/index.php
+++ b/Vue/Proformahospitalisation/index.php
@@ -24,6 +24,8 @@
 	$codeEtatBeneficiaire 		= $_SESSION['p_codeEtatBeneficiaire_P'];
 	$etatbeneficiaireEng 		= $_SESSION['p_etatbeneficiaireEng_P'];
 	$etatbeneficiaire 			= $_SESSION['p_etatbeneficiaire_P'];
+
+	$token = $_SESSION['csrf_token_submieted'];	
 ?>
 
 <legend> <?= _("Proforma d'hospitalisation chirurgicale").$numero ?> </legend>
@@ -38,6 +40,7 @@
 
 <input class="sr-only" id="idBeneficiaire" name="idBeneficiaire"  type="text" value= "<?=$idBeneficiaire?>" >
 
+<input type="hidden" id="csrf_token" name="csrf_token" value="<?= htmlspecialchars($token) ?>">
 
 <table class="table table-condensed"  style="font-size:10pt; padding:0px;">
 	<tbody>