diff --git a/pages/HTML/identities.html b/pages/HTML/identities.html
index e252a63..aca5d10 100644
--- a/pages/HTML/identities.html
+++ b/pages/HTML/identities.html
@@ -30,6 +30,7 @@
             
                     <div class="row" style="margin-top: 15px;">
                         <div class="col">
+                            %&CSRF%&
                             <button type="submit" name="createIdent" class="btn btn-primary btn-lg">Erstelle Identität</button>
                         </div>
                     </div>
diff --git a/pages/HTML/invite.html b/pages/HTML/invite.html
index 6ecfc75..fd61409 100644
--- a/pages/HTML/invite.html
+++ b/pages/HTML/invite.html
@@ -16,6 +16,7 @@
 
         <div class="row" style="margin-top: 15px;">
             <div class="col">
+                %%CSRF%%
                 <button type="submit" name="generateLink" class="btn btn-primary btn-lg">Link Generieren</button>
             </div>
         </div>
diff --git a/pages/HTML/passwort.html b/pages/HTML/passwort.html
index 142f1ee..ea2e935 100644
--- a/pages/HTML/passwort.html
+++ b/pages/HTML/passwort.html
@@ -35,6 +35,7 @@
 
         <div class="row" style="margin-top: 15px;">
             <div class="col">
+                %%CSRF%%
                 <button type="submit" name="savePassword" class="btn btn-primary btn-lg">Speichern</button>
             </div>
         </div>
diff --git a/pages/HTML/profile.html b/pages/HTML/profile.html
index d3a0295..b3ba7f0 100644
--- a/pages/HTML/profile.html
+++ b/pages/HTML/profile.html
@@ -50,6 +50,7 @@
             
                     <div class="row" style="margin-top: 15px;">
                         <div class="col">
+                            %%CSRF%%
                             <button type="submit" name="saveProfileData" class="btn btn-primary btn-lg">Speichern</button>
                         </div>
                     </div>
@@ -84,6 +85,7 @@
 
                     <div class="row" style="margin-top: 15px;">
                         <div class="col">
+                            %%CSRF%%
                             <center><button type="submit" name="savePassword" class="btn btn-primary btn-lg">Speichern</button></center>
                         </div>
                     </div>
@@ -103,6 +105,7 @@
                 <form action="index.php?page=profile" method="post">
                     <div class="row" style="margin-top: 15px;">
                         <div class="col">
+                            %%CSRF%%
                             <center><button type="submit" name="createIAR" class="btn btn-primary btn-lg" %%IARBUTTONSTATE%%>IAR erstellen</button></center>
                         </div>
                     </div>
diff --git a/pages/HTML/users.html b/pages/HTML/users.html
index fec4512..28de539 100644
--- a/pages/HTML/users.html
+++ b/pages/HTML/users.html
@@ -23,6 +23,7 @@
             
                     <div class="row" style="margin-top: 15px;">
                         <div class="col">
+                            %%CSRF%%
                             <button type="submit" name="generateLink" class="btn btn-primary btn-lg">Link Generieren</button>
                         </div>
                     </div>
diff --git a/pages/identities.php b/pages/identities.php
index 56489a3..61703f5 100644
--- a/pages/identities.php
+++ b/pages/identities.php
@@ -105,7 +105,7 @@
         {
             $entry = '<tr><td>'.htmlspecialchars(trim($RUNTIME['OPENSIM']->getUserName($row['IdentityID']))).' <span class="badge badge-info">Aktiv</span></td><td>-</td></tr>';
         }else{
-            $entry = '<tr><td>'.htmlspecialchars(trim($RUNTIME['OPENSIM']->getUserName($row['IdentityID']))).'</td><td><form action="index.php?page=identities" method="post"><input type="hidden" name="newuuid" value="'.htmlspecialchars($row['IdentityID']).'"><button type="submit" name="enableIdent" class="btn btn-success btn-sm">Aktievieren</button></form></td></tr>';
+            $entry = '<tr><td>'.htmlspecialchars(trim($RUNTIME['OPENSIM']->getUserName($row['IdentityID']))).'</td><td><form action="index.php?page=identities" method="post">%%CSRF%%<input type="hidden" name="newuuid" value="'.htmlspecialchars($row['IdentityID']).'"><button type="submit" name="enableIdent" class="btn btn-success btn-sm">Aktievieren</button></form></td></tr>';
         }
 
         $table = str_replace("%%ENTRY%%", $entry."%%ENTRY%%", $table);
diff --git a/style/login/login.html b/style/login/login.html
index e768d95..b2db1a6 100644
--- a/style/login/login.html
+++ b/style/login/login.html
@@ -52,6 +52,7 @@
 						</div>
 
 						<div class="container-login100-form-btn m-t-17">
+							%%CSRF%%
 							<button class="login100-form-btn" name="login">
 								Anmelden
 							</button>
diff --git a/style/login/register.html b/style/login/register.html
index d266f4d..45310dd 100644
--- a/style/login/register.html
+++ b/style/login/register.html
@@ -62,6 +62,7 @@
 						</div>
 
 						<div class="container-login100-form-btn m-t-17">
+							%%CSRF%%
 							<input type="hidden" name="code" value="%%INVCODE%%">
 							<button class="login100-form-btn" name="doRegister">
 								Registrieren