In includes/functions/html_output.php
function zen_draw_form
line 363
I believe this new line to add the security token is missing the closing slash for valid XHTML:
if (strtolower($method) == 'post') $form .= '<input type="hidden" name="securityToken" value="' . $_SESSION['securityToken'] . '"/>';//steve added closing slash
Bookmarks