diff --git a/www/wot.php b/www/wot.php
index 560cbf1..5f36c90 100644
--- a/www/wot.php
+++ b/www/wot.php
@@ -403,6 +403,8 @@
 
 	if($oldid == 8)
 	{
+		csrf_check("chgcontact");
+
 		$info = mysql_escape_string(strip_tags(stripslashes($_POST['contactinfo'])));
 		$listme = intval($_POST['listme']);
 		if($listme < 0 || $listme > 1)