diff --git a/admin/module.php b/admin/module.php
index 3985475d244..1ab26d4e91e 100644
--- a/admin/module.php
+++ b/admin/module.php
@@ -13,6 +13,9 @@
         error("Site isn't defined!");
     }
 
+    if (!confirm_sesskey()) {
+        error(get_string('confirmsesskeybad', 'error'));
+    }
 
 /// If data submitted, then process and store.
 
diff --git a/admin/modules.php b/admin/modules.php
index 61cc3ffa194..2ee2b0c26bb 100644
--- a/admin/modules.php
+++ b/admin/modules.php
@@ -165,7 +165,7 @@
         $delete = "<a href=\"modules.php?delete=$module->name\">$strdelete</a>";
 
         if (file_exists("$CFG->dirroot/mod/$module->name/config.html")) {
-            $settings = "<a href=\"module.php?module=$module->name\">$strsettings</a>";
+            $settings = "<a href=\"module.php?module=$module->name&sesskey=$USER->sesskey\">$strsettings</a>";
         } else {
             $settings = "";
         }
diff --git a/mod/assignment/config.html b/mod/assignment/config.html
index b00b76a5095..a0701f3b1e3 100644
--- a/mod/assignment/config.html
+++ b/mod/assignment/config.html
@@ -1,4 +1,5 @@
 <form method="post" action="module.php" name="form">
+<input type="hidden" name="sesskey" value="<?php echo $USER->sesskey ?>">
 
 <table cellpadding=9 cellspacing=0 >
 <tr valign=top>
diff --git a/mod/attendance/config.html b/mod/attendance/config.html
index a31d9b209f4..6f6137c777d 100644
--- a/mod/attendance/config.html
+++ b/mod/attendance/config.html
@@ -1,4 +1,5 @@
 <form method="post" action="module.php" name="form">
+<input type="hidden" name="sesskey" value="<?php echo $USER->sesskey ?>">
 
 <table cellpadding=9 cellspacing=0 >
 <tr valign=top>
diff --git a/mod/chat/config.html b/mod/chat/config.html
index c713b724d5a..27c3f25ea7f 100644
--- a/mod/chat/config.html
+++ b/mod/chat/config.html
@@ -1,4 +1,5 @@
 <form method="post" action="module.php" name="form">
+<input type="hidden" name="sesskey" value="<?php echo $USER->sesskey ?>">
 
 <table cellpadding="9" cellspacing="0" >
 
diff --git a/mod/forum/config.html b/mod/forum/config.html
index f4a92a5b0ba..58c422d92f7 100644
--- a/mod/forum/config.html
+++ b/mod/forum/config.html
@@ -1,4 +1,5 @@
 <form method="post" action="module.php" name="form">
+<input type="hidden" name="sesskey" value="<?php echo $USER->sesskey ?>">
 
 <table cellpadding="9" cellspacing="0" >
 <tr valign="top">
diff --git a/mod/glossary/config.html b/mod/glossary/config.html
index c413966034f..3b5fdde7d64 100644
--- a/mod/glossary/config.html
+++ b/mod/glossary/config.html
@@ -3,6 +3,7 @@
     $no  = get_string("no");
 ?>
 <form method="post" action="module.php" name="form">
+<input type="hidden" name="sesskey" value="<?php echo $USER->sesskey ?>">
 
 <table cellpadding=9 cellspacing=0 >
 <tr valign=top>
diff --git a/mod/glossary/formats.php b/mod/glossary/formats.php
index 90bbd85d651..f1fdc07a02e 100644
--- a/mod/glossary/formats.php
+++ b/mod/glossary/formats.php
@@ -32,7 +32,7 @@
             }
             update_record("glossary_formats",$displayformat);
         }
-        redirect("../../admin/module.php?module=glossary#formats");
+        redirect("../../admin/module.php?sesskey=$USER->sesskey&module=glossary#formats");
         die;
     } elseif ( $mode == 'edit' and $form) {
         
@@ -44,7 +44,7 @@
         $displayformat->sortorder   = $form->sortorder;
         
         update_record("glossary_formats",$displayformat);
-        redirect("../../admin/module.php?module=glossary#formats");
+        redirect("../../admin/module.php?sesskey=$USER->sesskey&module=glossary#formats");
         die;
     }
     
@@ -57,7 +57,7 @@
     print_header("$strmodulename: $strconfiguration", $site->fullname,
                   "<a href=\"../../admin/index.php\">$stradmin</a> -> ".
                   "<a href=\"../../admin/configure.php\">$strconfiguration</a> -> ".
-                  "<a href=\"../../admin/modules.php\">$strmanagemodules</a> -> <a href=\"../../admin/module.php?module=glossary\">$strmodulename</a> -> $strdisplayformats");
+                  "<a href=\"../../admin/modules.php\">$strmanagemodules</a> -> <a href=\"../../admin/module.php?module=glossary&sesskey=$USER->sesskey\">$strmodulename</a> -> $strdisplayformats");
 
     print_heading($strmodulename . ': ' . get_string("displayformats","glossary"));
 
diff --git a/mod/resource/config.html b/mod/resource/config.html
index 0ca20db9137..819cf5fd747 100644
--- a/mod/resource/config.html
+++ b/mod/resource/config.html
@@ -1,4 +1,5 @@
 <form method="post" action="module.php" name="form">
+<input type="hidden" name="sesskey" value="<?php echo $USER->sesskey ?>">
 
 <table cellpadding="9" cellspacing="0" >
 <tr valign="top">
diff --git a/mod/scorm/config.html b/mod/scorm/config.html
index 23e60b919fe..34f2a3815b1 100755
--- a/mod/scorm/config.html
+++ b/mod/scorm/config.html
@@ -1,4 +1,5 @@
 <form method="post" action="module.php" name="form">
+<input type="hidden" name="sesskey" value="<?php echo $USER->sesskey ?>">
 
 <table cellpadding="9" cellspacing="0" >
 <tr valign="top">