From daf08931816ff155cea9fa905e4f6fe9dfab5522 Mon Sep 17 00:00:00 2001
From: Jun Pataleta <jun@moodle.com>
Date: Wed, 24 Oct 2018 10:44:55 +0800
Subject: [PATCH] MDL-63183 auth_shibboleth: Add hidden login token in guest
 login form

---
 auth/shibboleth/index_form.html | 1 +
 1 file changed, 1 insertion(+)

diff --git a/auth/shibboleth/index_form.html b/auth/shibboleth/index_form.html
index 144c1fd7dae..9f1e23e6ef8 100644
--- a/auth/shibboleth/index_form.html
+++ b/auth/shibboleth/index_form.html
@@ -54,6 +54,7 @@ if ($show_instructions) {
         </div>
         <form action="../../login/index.php" method="post" id="guestlogin">
           <div class="guestform">
+            <input type="hidden" name="logintoken" value="<?php echo s(\core\session\manager::get_login_token()); ?>" />
             <input type="hidden" name="username" value="guest" />
             <input type="hidden" name="password" value="guest" />
             <input type="submit" value="<?php print_string("loginguest") ?>" />