From d54061d1f87b152c44eef4a50f8e4dca95de5af1 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Michal=20=C4=8Ciha=C5=99?= <michal@cihar.com>
Date: Mon, 13 Feb 2017 12:51:31 +0100
Subject: [PATCH] Include token in hidden fields
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

This will fix few broken users:

- error reporting
- table search in navigation
- user preferences

Fixes #12964

Signed-off-by: Michal Čihař <michal@cihar.com>
---
 ChangeLog         | 1 +
 libraries/URL.php | 5 +++--
 2 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/ChangeLog b/ChangeLog
index 415f760127..c272e506b2 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -65,6 +65,7 @@ phpMyAdmin - ChangeLog
 - issue #12990 Fixed error when loading favorite tables to console
 - issue #12981 Improved rendering of new version information
 - issue #12922 Fixed bookmarks ordering
+- issue #12964 Fixed table search in navigation
 
 4.6.6 (2017-01-23)
 - issue #12759 Fix Notice regarding 'Undefined index: old_usergroup'
diff --git a/libraries/URL.php b/libraries/URL.php
index 8b463ade5f..0cafca84eb 100644
--- a/libraries/URL.php
+++ b/libraries/URL.php
@@ -63,8 +63,6 @@ class URL
             $params['collation_connection'] = $GLOBALS['collation_connection'];
         }
 
-        $params['token'] = $_SESSION[' PMA_token '];
-
         if (! is_array($skip)) {
             if (isset($params[$skip])) {
                 unset($params[$skip]);
@@ -114,6 +112,9 @@ class URL
     {
         $fields = '';
 
+        /* Always include token */
+        $values['token'] = $_SESSION[' PMA_token '];
+
         foreach ($values as $name => $value) {
             if (! empty($pre)) {
                 $name = $pre . '[' . $name . ']';