diff --git a/classes/dlg.php b/classes/dlg.php
index a72683ef3..33295b904 100644
--- a/classes/dlg.php
+++ b/classes/dlg.php
@@ -417,6 +417,7 @@ class Dlg extends Protected_Handler {
 		print "<input dojoType=\"dijit.form.TextBox\" style=\"display : none\" name=\"op\" value=\"pref-filters\">";
 		print "<input dojoType=\"dijit.form.TextBox\" style=\"display : none\" name=\"quiet\" value=\"1\">";
 		print "<input dojoType=\"dijit.form.TextBox\" style=\"display : none\" name=\"method\" value=\"add\">";
+		print "<input dojoType=\"dijit.form.TextBox\" style=\"display : none\" name=\"csrf_token\" value=\"".$_SESSION['csrf_token']."\">";
 
 		$result = db_query($this->link, "SELECT id,description
 			FROM ttrss_filter_types ORDER BY description");
diff --git a/classes/pref_filters.php b/classes/pref_filters.php
index 4ab12410f..e627ed2c8 100644
--- a/classes/pref_filters.php
+++ b/classes/pref_filters.php
@@ -209,6 +209,7 @@ class Pref_Filters extends Protected_Handler {
 		print "<input dojoType=\"dijit.form.TextBox\" style=\"display : none\" name=\"op\" value=\"pref-filters\">";
 		print "<input dojoType=\"dijit.form.TextBox\" style=\"display : none\" name=\"id\" value=\"$filter_id\">";
 		print "<input dojoType=\"dijit.form.TextBox\" style=\"display : none\" name=\"method\" value=\"editSave\">";
+		print "<input dojoType=\"dijit.form.TextBox\" style=\"display : none\" name=\"csrf_token\" value=\"".$_SESSION['csrf_token']."\">";
 
 		$result = db_query($this->link, "SELECT id,description
 			FROM ttrss_filter_types ORDER BY description");